Golf App Exposes 218k Users’ Data Online

guest · May 21, 2019

Golf App Exposes 218k Users’ Data Online
May 21, 2019
https://securitydiscovery.com/game-golf/

On April 1st Bob Diachenko discovered a non-password protected Elastic database that appeared to contain millions of records detailing golf games, courses, messages, and other player data.
The purpose of the application and wearable is that they track a golfer’s on-course performance and use data to improve the user’s game.

Unfortunately, all of this user data was collected and stored in a publicly accessible database that was accessible by anyone with an internet connection. This data includes a massive 134 million rounds of golf, 4.9 million user notifications, and 19.2 million records in a folder called “activity feed”. According to GAME GOLF’s website they use 60 billion data points, machine learning and artificial intelligence.

The detailed user profiles contained usernames, passwords, gender, FaceBook authorization tokens, and other potentially sensitive information. When combined this data could theoretically create a more complete profile of the user and adding additional privacy concerns. This incident once again raises this issue of how applications gather and store user data.
Click to expand...

Log in or Sign up

Golf App Exposes 218k Users’ Data Online

guest Guest

Log in or Sign up

Golf App Exposes 218k Users’ Data Online

guest Guest

Useful Searches