Recently I discovered a non-password protected database that contained a total of 170,239 records. The data contained details of medical […]
Digital Marketing Agency Exposed 92 Million Records Online Including Employee and Client Data.
Several months ago I discovered a non-password protected database that contained 92 million records. Upon further investigation it appeared to […]
Medical AI Company Exposed Millions of Records Online
Recently I discovered a non-password protected database that contained 886,521,320 records. The total size of the dataset was 68.53 GB […]
Enterprise software developer leaked 82 million records online
Recently I discovered a non-password-protected database that contained over 82 million records. The records had information that referenced multiple companies, […]
Porn Blocking App Exposed User Data Online
Porn Blocking App called BlockerX Suffered a data leak that may have potentially put vulnerable users at risk. On August […]
Office Depot Exposed Customer Records Online
On March 3rd, 2021 I discovered a non-password protected Elasticsearch database that contained just under a million records. The exposed […]
Microfinance Bank’s Fintech App Leaks Customer Accounts Online
On March 3rd I discovered a non-password protected database that contained 271k records. It was clear from the start that […]
Security Discovery Co-Founder Launches Service to Protect and Support Older People
Technology can often be considered both a gift and a curse for a growing population of older people. It can […]
Luxury Real Estate Firm Exposed Owner and Agent Data Online For Months, Later Wiped Out By Malicious Meow Bot
On June 17th I discovered a dataset that contained a massive amount of records that were clearly related to a […]
Hosting Provider Exposed 63 Million Records and User Passwords
On October 5th I discovered a non-password protected database that contained a large amount of monitoring and system logs. There […]
Property Management Company Exposed 1.2 Million Records Online
In June 2020, I discovered a large amount of records that contained detailed information on property renters, visitors, commercials leases, […]
AI Company Exposed 2.5 Million Records Including Medical Data of Auto Accident Victims Online
In the ever-changing world of cyber security there are few types of records that are as valuable or sensitive […]
PADI Certified Divers Records Exposed in a Misconfiguration Incident
On May 6th I have identified an open and unprotected Elasticsearch server that appeared to contain registration details for US-based […]
SMS Spam Operation Rebrands, Continues to Leak Customer Information
Earlier this year, I discovered that SMS marketing firm, Rocket Text (rocket-text.com), failed to secure its Mongo database exposing just […]
A UK-based Security Company Seemed To Have Inadvertently Exposed Its ‘Leaks Database’ with 5B+ Records
On March 16th I have found an unprotected and thus publicly available Elasticsearch instance which appeared to be managed by […]
Free Wifi User Data Exposed in Multiple UK Train Stations
On February 14th I discovered a non-password protected database that contained a massive amount of records totaling 146 million. Upon […]
US non-profit for international study exposes private documents of thousands of students: report
The Institute of International Education (IIE), a US nonprofit that focuses on foreign exchange study and scholarship, exposed a database […]
Estee Lauder Exposed 440 Million Records Online
On January 30th I discovered a non-password protected database that contained a massive amount of records totaling 440,336,852. Upon further review […]
Pabbly Email Marketing Exposes 51.2 Million Records Online
Email marketing is big business and many companies rely on emails to keep in contact with their customers or potential […]
Online Eyewear Websites Expose Data of 186k Customers
In October 2019 I discovered a database that contained 186,000 sales records and 40.4 million visitor IP addresses. From October […]