Paleohacks data leak exposes customer records, password reset tokens

guest · Apr 30, 2021

Paleohacks data leak exposes customer records, password reset tokens
The leak wasn’t dealt with until Amazon was contacted directly.
April 29, 2021
https://www.zdnet.com/article/paleohacks-data-leak-exposes-customer-records-password-reset-tokens/

A popular online resource for paleo recipes and tips was the source of a data leak impacting roughly 70,000 users.

On Thursday, researchers from vpnMentor revealed a misconfigured Amazon AWS S3 bucket as the central point of the data breach, in which the account was used to store the private data and records of users.
Click to expand...

The team, led by Noam Rotem, said that there was a failure to implement "basic data security protocols" on the S3 bucket, and such misconfiguration means that there were no access limits to the public.

The unsecured bucket was discovered on February 4. VpnMentor attempted to contact the vendor on February 7, 9, and March 17; however, there was no response. As a result, the team reached out to Amazon as a last resort.
It is not known if any unauthorized individuals have accessed the bucket.
Click to expand...

Log in or Sign up

Paleohacks data leak exposes customer records, password reset tokens

guest Guest

Log in or Sign up

Paleohacks data leak exposes customer records, password reset tokens

guest Guest

Useful Searches