Unsecured Database Exposed Data on Millions

guest · Aug 5, 2021

Unsecured Database Exposed Data on Millions
August 4, 2021
https://www.databreachtoday.com/unsecured-database-exposed-data-on-millions-a-17215

Researchers at vpnMentor say that B2B marketing company OneMoreLead exposed the data of up to 126 million Americans on a misconfigured Elasticsearch server.

In a newly released report, researchers at vpnMentor say they discovered the exposed database on April 16 and notified OneMoreLead on April 20, after which the vendor secured it.

"OneMoreLead was storing all this information on an unsecured database, which the company had left completely open," vpnMentor says in a new report.
"As a result, the names, email addresses and workplace information were exposed to anyone with a web browser. Had malicious hackers discovered this database, it would have been a gold mine for various criminal activities, from financial fraud and identity theft, to large-scale phishing attacks targeting U.S. companies and government institutions."
Click to expand...

The researchers say numerous email addresses belonging to U.S. government agencies and the New York Police Department were included in the exposed database.

OneMoreLead is a data broker service that offers dynamic data lists to use for sales and marketing.
Click to expand...

Already Exposed Data?
During the investigation, researchers noticed that the exposed data appeared similar to data leaked by German B2B marketing company Leadhunter in 2020. "Leadhunter denied responsibility for the leak at the time, and researchers couldn’t confirm a link," the researchers say.
Click to expand...

guest · Aug 9, 2021

Data breach exposes millions of seniors' data
Misconfigured S3 bucket had exposed personal information on three million people
August 9, 2021
https://www.itpro.co.uk/data-insigh...ach-exposes-details-on-millions-of-us-seniors

Security researchers have found a major breach that exposed the details of over three million US seniors.

According to WizCase, the data breach affected SeniorAdvisor, “one of the largest consumer ratings and reviews websites for senior care and services across the US and Canada.” Among the exposed details were users’ names, surnames, phone numbers, and more.
Click to expand...

Researchers at WizCase discovered a misconfigured Amazon S3 bucket belonging to the website containing over 1 million files and 182GB of data. Contact dates from the files suggest they are from 2002 to 2013, though the files had a 2017 timestamp.

“The majority of data exposed was in the form of leads, a list of potential customers whose details were collected by SeniorAdvisor presumably via their email or phone call campaigns,” said researchers.
Click to expand...

WizCase: Data Breach: Millions of Senior Citizens’ Names, Emails, and Phone Numbers Compromised in Senior Care Review Website Database Breach

In addition, our security team found around 2,000 “scrubbed” reviews. These are reviews where the user’s sensitive information has been wiped or redacted. However, this scrubbing process is useless if you have the corresponding information. The scrubbed reviews had a lead id which could be used to trace the review back to who originally wrote it.
Click to expand...

guest · Sep 21, 2021

Data of 106 million visitors to Thailand leaked online
September 21, 2021
https://securityaffairs.co/wordpress/122418/data-breach/thailand-visitors-leaked-online.html

The popular cybersecurity research Bob Diachenko discovered his personal data online stored on an unprotected Elasticsearch database containing the personal details of more than 106 million visitors to Thailand.

The expert discovered the unsecured database on August 22, 2021, and immediately notified the Thai authorities, he noticed that some of the data stored in the archive date back ten years.
While the IP address of the database is still public, the database was taken offline and has been replaced with a honeypot.
Click to expand...

The database was 200GB in size and contained several assets, including more than 106 million records.

Exposed records include full names, arrival dates, gender, residency status, passport numbers, visa information, and Thai arrival card numbers.

“Diachenko surmises that any foreigner who traveled to Thailand in the last decade might have had their information exposed in the incident. He even confirmed the database contained his own name and entries to Thailand.” reads the post published by Comparitech.
The good news is that no financial data was contained in the database.
Click to expand...

Comparitech: Database containing personal info of 106 million international visitors to Thailand was exposed online

An unsecured database containing international travel records dating back 10 years was left exposed on the web.
Click to expand...

guest · Sep 28, 2021

Storybooks for children app FarFaria exposed data of 3M users
September 28, 2021
https://www.hackread.com/storybooks-for-children-app-farfaria-exposed-data/

Another day, another data leak incident involving misconfigured and exposed MongoDB database – This time it is FarFaria, a San Francisco, CA-based company that offers storybooks for children service through Android and iOS apps.

It all happened when Bob Diachenko, the head of security research at Comparitech, discovered a misconfigured MongoDB database containing a treasure trove of data left exposed to the public without any password or security authentication.
Click to expand...

The incident took place on August 9th, 2021 but Diachenko only shared its details on September 27th. According to the researcher, the database, which belonged to FarFaria, was indexed by the BinaryEdge search engine and contained 38 GB worth of data with contact information and login credentials of 2.9 million users.

It is worth noting that according to FarFaria, its apps are “created for children ages 2-9” meaning that the misconfiguration exposed children to cybercrime and online crooks.
Click to expand...

Bob Diachenko (Comparitech): Popular children's story books service exposed customers data

Note that cybercriminals might use information from other data exposures to find out more details about potential victims. These could serve to make phishing attempts extra convincing. Customers should be on the lookout for such messages and avoid clicking links or attachments in any unsolicited emails or text messages.

Among the exposed details are a number of authentication tokens. These could prove particularly useful to criminals looking to carry out complex phishing attacks on the users.
Click to expand...

guest · Nov 22, 2021

Data from millions of Brazilians exposed in Wi-Fi management software firm leak
The data includes full name, email address, full address, and taxpayer registration numbers.
November 22, 2021
https://www.zdnet.com/article/millions-of-brazilians-exposed-in-wi-fi-management-software-firm-leak/

A Brazilian Wi-Fi management software firm exposed data of various high profile companies and millions of their customers.

The data was leaked by WSpot, which provides software that enables businesses to secure their on-premise Wi-Fi networks and allow password-free online access to their customers.
Click to expand...

The leak was discovered by security research firm SafetyDetectives. The researchers found WSpot's misconfigured Amazon Web Services (AWS) S3 bucket, which was left open and exposed 10GB worth of data to the public. After discovering the sensitive data on September 2, the researchers contacted the software firm on September 7. WSpot secured the breach the following day.

Some 226,000 files were exposed in the leak, the researchers noted, including personal information from approximately 2.5 million individuals who connected to the public Wi-Fi networks provided by WSpot clients. The company's client portfolio includes Pizza Hut, financial services provider Sicredi, and healthcare firm Unimed.
Click to expand...

It's unclear whether the company will inform the individuals exposed about the incident.
Click to expand...

guest · Aug 5, 2022

Chinese Adult Site Leaking 14 Million User Details – and It’s Increasing!
So far, the platform has leaked more than 14 million user accounts with more than 24 GB worth of files.
August 6, 2022

Hjedd, an infamous Chinese adult content and NSFW platform has been exposing a treasure trove of user data online since at least July 2022. This was discovered by independent security researcher Anurag Sen who confirmed to Hackread.com that the server is still exposed and publicly accessible without any security authentication or password.

For your information, a database or server exposed without security authentication means anyone with a slight bit of knowledge about finding unsecured databases on Shodan and other such platforms can have complete access to Hjedd’s user data.
Click to expand...

At the time of writing, Hackread.com can confirm that the leaky server comprises details of over 14 million users with more than 24 GB worth of records.
What’s worse, the data is being frequently updated with details of new and already registered users.
Potential Threat
According to the researcher, the information stored in this database is vulnerable to spam marketing and phishing campaigns. Leaving information like username, email, and Mobile number.

The leaked passwords, on the other hand, are hashed but they can be matched with encrypted hashes of the password list to find the plain text password for the accounts.
Click to expand...

guest · Sep 3, 2022

Leading Russian streaming platform suffers data leak allegedly impacting 44 million users
By Daryna Antoniuk @daryna_antoniuk - August 29, 2022

Russian streaming giant START said on Sunday that the personal information of its customers was leaked during a cyberattack.

The company did not disclose how many users were affected by the breach but according to the Russian Telegram channel Information Leaks — which first publicized the incident and posted alleged screenshots of leaked information — the 72 GB database contains data on 44 million customers.
The leaked information includes usernames, email addresses, hashed passwords, IP addresses, users’ countries of registration, subscription start and end dates, and the last login to the service.
Click to expand...

START, which sells films and TV shows in more than 174 countries, is one of many Russian companies that have suffered data leaks and hacks following Russia’s invasion of Ukraine.
The data breach allegedly affects viewers worldwide, including 24.6 million users from Russia, 2.3 million from Kazakhstan, 2.1 million from China, and 1.7 million from Ukraine.

The hackers claimed the data came from an exposed MongoDB database program, which contained the details of users who signed up on the website until September 22 of last year.
Click to expand...

START said it has already fixed the vulnerability and closed access to the database.

“The leaked data is of little interest to attackers,” the company wrote in a statement. “The most important information there is the users’ emails and phone numbers.”
Financial information, such as credit card numbers, were not included in the database, according to START. The company is not requiring users to change passwords because they are encrypted, it said.

It’s unclear who is behind the attack or what motivated it — no hacking group has yet claimed responsibility for the attack on the service.
Click to expand...

Log in or Sign up

Unsecured Database Exposed Data on Millions

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Unsecured Database Exposed Data on Millions

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches