Urban Massage exposed a huge customer database, including sensitive comments on its creepy clients

guest · Nov 27, 2018

Urban Massage exposed a huge customer database, including sensitive comments on its creepy clients
November 27, 2018
https://techcrunch.com/2018/11/27/urban-massage-data-exposed-customers-creepy-clients/

The London, U.K.-based startup — now known as just Urban — left its Google-hosted ElasticSearch database online without a password, allowing anyone to read hundreds of thousands of customer and staff records. Anyone who knew where to look could access, edit or delete the database.

Security researcher Oliver Hough found the database through Shodan [...]
It’s not known how long the database was exposed or if anyone else had accessed or obtained the database before it was pulled. It’s believed that the database was exposed for at least a few weeks.

At the time of securing the database, the company had exposed more than 309,000 user records, including names, email addresses and phone numbers. Each record also had a unique referral code, allowing friends to get discounted treatments.
Click to expand...

Log in or Sign up

Urban Massage exposed a huge customer database, including sensitive comments on its creepy clients

guest Guest

Log in or Sign up

Urban Massage exposed a huge customer database, including sensitive comments on its creepy clients

guest Guest

Useful Searches