Personal data of thousands of “Le Figaro” readers exposed on a server

guest · Apr 30, 2020

French Subscribers to Famous News Site at Risk from Hacking, Fraud
April 30, 2020
https://www.safetydetectives.com/blog/lefigaro-leak-report/

The security research team at Security Detectives, led by Anurag Sen, has uncovered a significant data leak from French daily newspaper Le Figaro.

Hosted on an Elasticsearch server owned by Poney Telecom in France, the leaking database contained over 8TB of data, totaling approximately 7.4 billion records. The server was live at the time of our investigation, leaking Personally Identifiable Information (PII) data from people accessing private accounts on Le Figaro’s news website, and in some cases, their login credentials.

The online version of Le Figaro is one of the top 50 most visited websites in France.
Click to expand...

What Was Been Leaked?
Le Figaro’s database contained API logs for its desktop and mobile websites, dating from the previous three months on any given date. For example, as our investigation started in late April 2020, records went back as far as February. As the database was built in March 2019, it’s also possible that it had been exposed much earlier than this.
Further Server Information
The compromised database also contained numerous technical logs exposing more of Le Figaro’s backend servers and possibly additional, potentially sensitive data that could be valuable for attackers hoping to compromise the company’s data infrastructure.
Click to expand...

Finally, and most worrisome of all, the database was completely exposed to the public – with no password required to access it. Anyone with the knowledge of the database’s IP address could have gained access.
Click to expand...

Log in or Sign up

Personal data of thousands of “Le Figaro” readers exposed on a server

guest Guest

Log in or Sign up

Personal data of thousands of “Le Figaro” readers exposed on a server

guest Guest

Useful Searches