The Institute of International Education (IIE), a US nonprofit that focuses on foreign exchange study and scholarship, exposed a database […]
Whirlpool Exposed Database with Home Appliances Scan Results
On October 1st, I have found a rather unusual web interface of Heartbeat monitoring service. The open and publicly available […]
Mexican Online Bookstore Exposed Data – Again
On September 9th, I have discovered three (3) open and unprotected MongoDB instances which appeared to be part of Librería Porrúa, […]
Banking Trojan Database Exposed – Millions of Users At Risk
On July 5th I discovered two (!) open and publicly accessible MongoDB instances which appeared to be part of the […]
Home and Family Job Search Engine Exposed Its Database
FamilaFacil, a Madrid-based home and family job search platform, has exposed its MongoDB database with details on their users and […]
Sex Sells! Spanish Chain of “Men’s Clubs” Exposed Its Database
On August 4th I discovered an open and unprotected MongoDB database which appeared to be part of a Spanish company […]
Even randomized dummy data should be protected
A database belonging to online voting system provider Everyone Counts has been exposed, leaving what appears to be “randomized and […]
London-based Marketplace Accidentally Exposed Personal Details of its Customers
In another MongoDB-related misconfiguration incident, a UK-based company exposed personal and payment data of several hundreds of its customers. On […]
Massive SMS Bombing Operation Uncovered In Passwordless Database
SMS marketing has been an increasing problem with the rise of scripts and applications and that send literally countless messages […]
Database With Millions of Indian Personal Records Exposed and Hijacked
On May 1st, I have discovered an unprotected and publicly indexed MongoDB database which contained 275,265,298 records with personal identifiable information […]
AMC inadvertently exposed its subscribers database for Sundance Now and Shudder services
On May 1st I have discovered an unprotected and publicly available MongoDB instance which appeared to contain data related to […]
Iranian Ride-Hailing App Database Exposure
On April 18th, during our regular security audit of nonSql databases with BinaryEdge search engine, I have discovered an open […]