Skip to content

Research & commentary

Articles

Microfinance Agency Exposed Thousands of Customer Records
Data Breach database elasticsearch

Microfinance Agency Exposed Thousands of Customer Records

In another Elasticsearch misconfiguration incident Credia.ge, a Tbilisi-based (Georgia) agency, exposed personal and loan information for thousands of its customers. […]
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director
Sex Sells! Spanish Chain of “Men’s Clubs” Exposed Its Database
Data Breach Data Security Education mongodb

Sex Sells! Spanish Chain of “Men’s Clubs” Exposed Its Database

On August 4th I discovered an open and unprotected MongoDB database which appeared to be part of a Spanish company […]
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director
Leadership for Educational Equity Exposes 3.69 Million Members Online
Data Breach database elasticsearch

Leadership for Educational Equity Exposes 3.69 Million Members Online

Security Researchers discover millions of member names and addresses connected to Leadership for Educational Equity a Washington DC based non-profit
Jeremiah Fowler

Jeremiah Fowler

Director of Security Research and Senior Communications Consultant
Even randomized dummy data should be protected
Data Security Education mongodb Opinion Article

Even randomized dummy data should be protected

A database belonging to online voting system provider Everyone Counts has been exposed, leaving what appears to be “randomized and […]
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director
Cheers – English Whiskey Club Leaked Info of 23,362 Members Online
Data Breach database elasticsearch

Cheers – English Whiskey Club Leaked Info of 23,362 Members Online

Security Researchers find database of English Whisky Co of Ltd Norwich, UK. The database contained thousands of records and member data.
Jeremiah Fowler

Jeremiah Fowler

Director of Security Research and Senior Communications Consultant
Jana Small Finance Bank Exposed Millions of Records Online
Data Breach database elasticsearch

Jana Small Finance Bank Exposed Millions of Records Online

Security Researched discovered massive data leak of Indian based Jana Small Finance Bank, Janalakshmi Financial Services.
Jeremiah Fowler

Jeremiah Fowler

Director of Security Research and Senior Communications Consultant
GE Aviation exposed internal configs via open Jenkins instance
Data Breach Data Security Education jenkins

GE Aviation exposed internal configs via open Jenkins instance

Back in June I decided to check how many open Jenkins instances are available for search and did additional parsing […]
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director
The University of Chicago Medicine Exposed ‘Perspective Givers’ Database With More Than A Million of Records
Data Breach elasticsearch

The University of Chicago Medicine Exposed ‘Perspective Givers’ Database With More Than A Million of Records

Elasticsearch misconfigurations and related data incidents have became top news recently, even after Elastic introduced free security packs for all […]
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director
London-based Marketplace Accidentally Exposed Personal Details of its Customers
Data Breach mongodb

London-based Marketplace Accidentally Exposed Personal Details of its Customers

In another MongoDB-related misconfiguration incident, a UK-based company exposed personal and payment data of several hundreds of its customers. On […]
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director
Mysterious Chinese Dating Apps Targeting US Customers Expose 42.5 Million Records Online
Data Breach database elasticsearch

Mysterious Chinese Dating Apps Targeting US Customers Expose 42.5 Million Records Online

Researchers found a non password protected database that contained millions of dating app records. Read more about the Chinese dating app data leak.
Jeremiah Fowler

Jeremiah Fowler

Director of Security Research and Senior Communications Consultant
Company Offering Unique Experiences, Wine Tours, and Kids’ Parties Exposes 212,220 Records Online
Data Breach database elasticsearch

Company Offering Unique Experiences, Wine Tours, and Kids’ Parties Exposes 212,220 Records Online

Melbourne, Australia based Amazingco exposed customer data online. Security Researcher has found more 174k customer files that were publicly accessible.
Jeremiah Fowler

Jeremiah Fowler

Director of Security Research and Senior Communications Consultant
Golf App Exposes 218k Users’ Data Online
Data Breach database elasticsearch

Golf App Exposes 218k Users’ Data Online

Security Researchers discover millions of records that appear to belong to GAME GOLF Poitentaly sensitive files include 218k user accounts that were exposed
Jeremiah Fowler

Jeremiah Fowler

Director of Security Research and Senior Communications Consultant
Panama Citizens Massive Data Breach
Data Breach database elasticsearch

Panama Citizens Massive Data Breach

On May 10th I identified a massive bulk of data sitting in an unprotected and publicly available Elasticsearch cluster (hence […]
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director
Massive SMS Bombing Operation Uncovered In Passwordless Database
Data Breach mongodb

Massive SMS Bombing Operation Uncovered In Passwordless Database

SMS marketing has been an increasing problem with the rise of scripts and applications and that send literally countless messages […]
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director
Database With Millions of Indian Personal Records Exposed and Hijacked
Data Breach database mongodb

Database With Millions of Indian Personal Records Exposed and Hijacked

On May 1st, I have discovered an unprotected and publicly indexed MongoDB database which contained 275,265,298 records with personal identifiable information […]
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director
Burger King’s Online Shop for Kids Exposed Data
Data Breach elasticsearch

Burger King’s Online Shop for Kids Exposed Data

Kool King Shop, (https://www.koolkingshop.fr/), a French-only online shop for kids who purchased Burger King’s menus, had customers data exposed in […]
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director
AMC inadvertently exposed its subscribers database for Sundance Now and Shudder services
Data Breach database mongodb

AMC inadvertently exposed its subscribers database for Sundance Now and Shudder services

On May 1st I have discovered an unprotected and publicly available MongoDB instance which appeared to contain data related to […]
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director
SkyMed Medical Evacuation Membership Service Exposed Data of 137k Members
Data Breach elasticsearch

SkyMed Medical Evacuation Membership Service Exposed Data of 137k Members

SkyMed medical exposed thousands of members data online and there was evidence of ransomware inside the database. Medical data leak.
Jeremiah Fowler

Jeremiah Fowler

Director of Security Research and Senior Communications Consultant
Iranian Ride-Hailing App Database Exposure
Data Breach database mongodb

Iranian Ride-Hailing App Database Exposure

On April 18th, during our regular security audit of nonSql databases with BinaryEdge search engine, I have discovered an open […]
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director
Massive Spam Operation Uncovered In A Database Leak
database elasticsearch spammers

Massive Spam Operation Uncovered In A Database Leak

Sometimes databases are left wide open not only by legit companies, but misconfigured by malicious actors themselves. Last month I […]
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director
1 2 3 4 5 6