Articles

Large Privacy Breach In India: Millions of Pregnant Women Had Their Details Leaked
Data Breach

Large Privacy Breach In India: Millions of Pregnant Women Had Their Details Leaked

Medical data is among the most sensitive information that organizations can collect, store, or share. It is  never a good […]
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director

Auchan France Left Digital Keys Exposed

Auchan France Left Digital Keys Exposed

On March 21, 2019, I have discovered a publicly available service instance which appeared to contain credentials and login details […]
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director

Spanish Gym Franchise Database Exposed By Partner’s Data Breach
Data Breach

Spanish Gym Franchise Database Exposed By Partner’s Data Breach

Spanish Gym VivaGym had a data breach that exposed sensitive data and contained evidence of Ransomware inside the database
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director

NJ Based Home Health Radiology Services Leaked Nearly 40k Case Files
Data Breach

NJ Based Home Health Radiology Services Leaked Nearly 40k Case Files

Security Researchers discover data breach of leaked medical case files that appear to belong to Home Health Radiology Services.
Jeremiah Fowler

Jeremiah Fowler

Director of Security Research and Senior Communications Consultant

A legal analytics company exposed passwordless database with sensitive documents
Data Breach

A legal analytics company exposed passwordless database with sensitive documents

On March 2nd, 2019, I have discovered an open and unprotected Elasticsearch cluster which contained 257,287 legal documents labeled as ‘not […]
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director

800+ Million Emails Leaked Online by Email Verification Service
Data Breach

800+ Million Emails Leaked Online by Email Verification Service

Our Biggest Data Breach Discovery of 2019 a massive 800 million emails leaked online. This data breach uncovered how an email verification service uses spam
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director

Dow Jones Risk Screening Watchlist Exposed Publicly in a Major Data Breach
Data Breach

Dow Jones Risk Screening Watchlist Exposed Publicly in a Major Data Breach

Dow Jones Data Breach. Security Discovery researchers found 2 million names in a database from the Dow Jones Risk Screening Watchlist. Dow Jones Data Leak
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director

Delhi Citizens Data Leak
Data Breach

Delhi Citizens Data Leak

On Feb 19, 2019, I have discovered a MongoDB that required no password. The database was located in an India […]
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director

Human Resources and employee management provider CavinHR leaks 400,000+ files including their customer’s employee files and internal employees.
Data Breach

Human Resources and employee management provider CavinHR leaks 400,000+ files including their customer’s employee files and internal employees.

CavinHR Data Breach Exposed 400k files that also included CavinTek info. Security Discovery cyber secuirty news and technology consulting services.
Jeremiah Fowler

Jeremiah Fowler

Director of Security Research and Senior Communications Consultant

Large eAccounting Data Breach in Mexico
Data Breach

Large eAccounting Data Breach in Mexico

On January 22, 2019, we have identified a passwordless MongoDB database with almost 5 Million records labeled as CFDI  (short […]
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director

Data Breaches by Insiders, Are You at Risk?
Data Security Education

Data Breaches by Insiders, Are You at Risk?

An astonishing 1 in 4 data breaches happen because of someone inside the organization and not a malicious actor. In […]
Jeremiah Fowler

Jeremiah Fowler

Director of Security Research and Senior Communications Consultant

A LatAm telecom company inadvertently exposed payment info of its subscribers
Data Breach

A LatAm telecom company inadvertently exposed payment info of its subscribers

On Nov 29th 2018 I have identified an unprotected Elasticsearch cluster, available for public access, via Shodan engine. It took […]
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director

Document Management Company Left Credit Reports Online
Data Breach

Document Management Company Left Credit Reports Online

On January 10th, I identified an unprotected Elasticsearch cluster which contained 51 GB of what appeared to be OCR (Optical […]
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director

Hundreds of VOIP Phone Databases Left Exposed No Password Needed and Ready to be Exploited

Hundreds of VOIP Phone Databases Left Exposed No Password Needed and Ready to be Exploited

VOIP is Voice over Internet Protocol and just as the name suggests it allows for the delivery of voice communications […]
Jeremiah Fowler

Jeremiah Fowler

Director of Security Research and Senior Communications Consultant

The World’s Largest Youth-Run Organization Had a Data Breach
Data Breach

The World’s Largest Youth-Run Organization Had a Data Breach

On January 11th, Bob Diachenko of SecurityDiscovery.com, identified another unprotected Elasticsearch instance which contained millions of records – this time […]
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director

What to do after a data breach
Data Security Education

What to do after a data breach

Two words no one wants to hear are “data breach”. It can not only be a nightmare for your reputation […]
Jeremiah Fowler

Jeremiah Fowler

Director of Security Research and Senior Communications Consultant

Indonesian Phone and Content Provider Tri.co.id Leaks Millions of Records Online
Data Breach

Indonesian Phone and Content Provider Tri.co.id Leaks Millions of Records Online

On December 1st 2018 Bob Diachenko found a misconfigured database that has publicly exposed millions of user contacts, SMS, and […]
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director

The Howard Hughes Corporation Leaks Database Passwords
Data Breach

The Howard Hughes Corporation Leaks Database Passwords

Researchers from SecurityDiscovery.com have found a security flaw in an Apache Airflow instance which allows anybody with an internet connection […]
Bob Diachenko

Bob Diachenko

Cyber Threat Intelligence Director

Marriott Hotels Reservation Database Exposes Data of 500 Million Guests
Data Breach

Marriott Hotels Reservation Database Exposes Data of 500 Million Guests

More Data More Problems This data breach will go down in the history books, not for how many customers’ records […]
Jeremiah Fowler

Jeremiah Fowler

Director of Security Research and Senior Communications Consultant

Top 10 Steps to prevent a Data Breach
Data Security Education

Top 10 Steps to prevent a Data Breach

  Today more than ever we live in a digital world that changes faster than we can protect the files […]
Jeremiah Fowler

Jeremiah Fowler

Director of Security Research and Senior Communications Consultant