Religious Website Data Exposed for Months

guest · Oct 24, 2019

Religious Website Data Exposed for Months
October 24, 2019
https://threatpost.com/religious-website-data-exposed-months/149535/

Religious website service Clover Sites exposed customer data for at least six to seven months, with the dataset found twice in two separate, insecure cloud databases.

Clover offers a content management system for building and managing faith-based websites, with a “Clover Donations” module for accepting money online. According to Jeremiah Fowler at Security Discovery, he found a non-password protected database in May that contained 65,800 detailed records with customer names, billing information, contact data and the last four digits of credit-card numbers.

In total, the exposed data “appears to be all of Clover Site’s customer accounts, past and present,” Fowler wrote in an analysis this week.
The interesting thing is that the same data set popped up in a separate unsecured database about a month before Fowler’s discovery.

“We have determined that this was a second and separate data incident than what Bob Diachenko reported to Clover Sites in April,” Fowler said. “This would mean that Clover Sites’ full client data has been exposed online two separate times and was accessible to anyone with an internet connection.”
Click to expand...

Security Discovery: Religious Website and Software Provider Leaks Customer and Credit Card Data for Many Months

Log in or Sign up

Religious Website Data Exposed for Months

guest Guest

Log in or Sign up

Religious Website Data Exposed for Months

guest Guest

Useful Searches