Marketing firm exposed millions of records

guest · Oct 12, 2020

Marketing Firm Spills Nearly Three Million Records
October 9, 2020
https://www.infosecurity-magazine.com/news/marketing-firm-spills-nearly-three/

A US digital marketing provider has exposed almost three million records containing personally identifiable information (PII) after another cloud configuration mistake.

The privacy snafu at Friendemic, whose main clients are reportedly US car dealerships, was discovered by Aaron Phillips at Comparitech. As is usual in these cases, the unencrypted data was left exposed to the public internet with no password or authentication required to access it.
In this particular instance it was an unsecured Amazon S3 bucket which Phillips claimed to be an SQL dump or database backup, potentially created for migrating data between servers.

All told there were over 2.7 million records including full names, phone numbers and email addresses, alongside 16 OAuth tokens stored in plaintext.
Click to expand...

“While no company ever wants something like this to happen, we are glad to have the vulnerability fixed,” it noted in a statement.
Click to expand...

Comparitech: Car dealer marketing service Friendemic exposes 2.7 million consumer records on the web: report

Names, emails, and phone numbers of 2.7 million Friendemic consumers in the US were exposed on a publicly accessible database without a password
Click to expand...

Log in or Sign up

Marketing firm exposed millions of records

guest Guest

Log in or Sign up

Marketing firm exposed millions of records

guest Guest

Useful Searches