Fitness Brand Exposes Customers in Massive Data Breach

guest · Jul 2, 2020

V Shred data leak exposes PII, sensitive photos of fitness customers and trainers
V Shred defended the public status of its open bucket and only partially solved the problem
July 2, 2020
https://www.zdnet.com/article/v-shr...ive-photos-of-fitness-customers-and-trainers/

Fitness brand V Shred exposed the personally identifiable information (PII) of over 99,000 customers and trainers -- and has yet to fully resolve the leaking database responsible.

Las Vegas-based V Shred is a company that offers fitness plans for women and men, with a focus on fast workouts, nutrition plans, and supplements. The firm says it has clients in 119 countries, 12 million unique visitors to its website per month, and over 40,000 subscribers to its university program.

On Thursday, vpnMentor's research team, led by Noam Rotem and Ran Locar, made the data leak public, in which an unsecured AWS S3 bucket exposed the PII of at least 99,000 individuals.
Click to expand...

ZDNet verified the open bucket and at the time of writing, many resources remain open and accessible, ranging from company materials to diet guides, workout plans, and user photos.
CSV files appearing to contain the information relating to both trainers and clients remain exposed. IDs, first and last names, email addresses, genders, and client email addresses are included.

"V Shred is a young company and appears to be run by a small team," VPNmentor noted. "However, it's still responsible for protecting the people using its products and signing up for its services. By not doing so, V Shred has jeopardized the privacy and security of the people exposed and the future of the company itself."
V Shred has not responded to repeated requests for comment at the time of writing.
Click to expand...

vpnMentor: Report: Fast Growing Fitness Brand Exposes Customers in Massive Data Breach

By not protecting these files, V Shred compromised the privacy and security of its customers and left them exposed to bullying, fraud, and more.

[...] As you can see from these examples, the files revealed a great deal of personal information about V Shred’s customers, compromising their privacy and exposing them to many potential issues.
Click to expand...

V Shred could have easily avoided this breach if it had taken some basic security measures to protect the data.
Click to expand...

Log in or Sign up

Fitness Brand Exposes Customers in Massive Data Breach

guest Guest

Log in or Sign up

Fitness Brand Exposes Customers in Massive Data Breach

guest Guest

Useful Searches