Real estate app leaking thousands of user records and sensitive private messages

guest · May 28, 2020

Real estate app leaking thousands of user records and sensitive private messages
May 27,2020
https://cybernews.com/security/real...-user-records-and-sensitive-private-messages/

The CyberNews research team uncovered an unsecured Amazon Simple Storage Service bucket of confidential user chat logs belonging to Tellus, a US-based software company.
Tellus is a software company based in Palo Alto, California, backed by “well-known investors” that aims to “reimagine Real Estate for the modern era.” The company’s app portfolio includes the Tellus App, a real estate loan, management and investing program.

The data bucket in question contains a folder with 6,729 CSV files related to the Tellus app that include the app’s user records, chat logs, and transaction records left on a publicly accessible Amazon storage server.
How we found the Tellus app bucket
We discovered the exposed data by scanning through open Amazon Simple Storage Service (S3) buckets, which are online servers that can be used to store data for websites, apps, archives, IoT devices, and more.
Click to expand...

This means that, in the worst-case scenario, leaving the Tellus S3 bucket unsecured and unencrypted might have led to the continued exposure of data belonging to the entire Tellus user base over a period of up to two years, from 2018 to 2020.
Click to expand...

Log in or Sign up

Real estate app leaking thousands of user records and sensitive private messages

guest Guest

Log in or Sign up

Real estate app leaking thousands of user records and sensitive private messages

guest Guest

Useful Searches