Unsecured server exposes 4 billion records, 1.2 billion people

guest · Nov 22, 2019

Unsecured server exposes 4 billion records, 1.2 billion people
November 22, 2019
https://www.scmagazine.com/home/sec...exposes-4-billion-records-1-2-billion-people/

Two security researchers have uncovered four billion records on 1.2 billion people on an unsecured Elasticsearch server impacting what is estimated to be hundreds of millions of people.

The data itself comes from the data aggregator and enrichment companies People Data Labs (PDL) and OxyData.Io and contains basic personal information, such as names, home and mobile phone numbers and email addresses and what may be information scraped from LinkedIn, Facebook and other social media sources, Vinny Troia reported.

Doing their due diligence, the firms were contacted and each denied ownership of the servers. This was true as was found that the information attributed to PDL was stored on Google Cloud while the PDL API appears to use Amazon Web Services.
Click to expand...

“This is an incredibly tricky and unusual situation. The lion’s share of the data is marked as ‘PDL’, indicating that it originated from People Data Labs. However, as far as we can tell, the server that leaked the data is not associated with PDL. This raises a number of other questions. First, how did this mystery organization get the data? Are they a current or former customer? If so, the data discovered on the server indicates that this company is a customer of both People Data Labs and OxyData,” Troia wrote.
Click to expand...

Personal And Social Information Of 1.2 Billion People Discovered In Massive Data Leak

Log in or Sign up

Unsecured server exposes 4 billion records, 1.2 billion people

guest Guest

Log in or Sign up

Unsecured server exposes 4 billion records, 1.2 billion people

guest Guest

Useful Searches