Unsecured database reveals sensitive info about movie chain customers

guest · Jan 27, 2020

Unsecured database reveals sensitive info about movie chain customers
Scoop: Passwords, partial payment info and government ID numbers were found on an exposed database
January 27, 2020
https://www.cnet.com/news/unsecured-database-reveals-sensitive-info-about-movie-chain-customers/

An unsecured database left sensitive information of thousands of movie buffs open on the internet for anyone to see, a security researcher said Monday. The information included full names, email addresses, unencrypted passwords, partial payment information and what appeared to be the government ID numbers of film lovers who made purchases with Peruvian company Cineplanet.

The open database, which anyone with the correct IP address could access on a web browser, also exposed information about members of the company's loyalty program, including employment and marital status.
Cineplanet didn't immediately respond to a request for comment. The company lists roughly 40 theater locations across the South American country on its website, with 23 in the capital city of Lima.

The researcher who found the database, Anurag Sen, published his findings on Monday with antivirus review website SafetyDetective and shared the research with CNET. The database appeared to only keep records for a one-month period, and about 1.5 million new records appeared on the website each day Sen observed it, he said.
Click to expand...

SafetyDetectives: Millions of Peruvian Moviegoers at Risk for Identity Theft, Cybercrime

This data leak also poses a real physical threat to moviegoers. With names and home addresses handy, criminals can stalk or attack potential victims. Combined with purchase history, it is even feasible that burglars and vandalizers will know the exact time their targets will be out of the home, providing a prime opportunity to rob and ruin property.
Click to expand...

Log in or Sign up

Unsecured database reveals sensitive info about movie chain customers

guest Guest

Log in or Sign up

Unsecured database reveals sensitive info about movie chain customers

guest Guest

Useful Searches