Data Breach – Security Discovery

Porn Blocking App Exposed User Data Online

Jeremiah Fowler

August 25, 2021 0 Comments

Porn Blocking App called BlockerX Suffered a data leak that may have potentially put vulnerable users at risk. On August 2nd, I discovered a non-password-protected database containing a large number of publicly exposed records. Among discovered data are user’s personal data, links to Amazon AW...

Data Breach Data Security Education elasticsearch

Bold.com Exposed Its Internal Infrastructure

Bob Diachenko

September 13, 2019 0 Comments

Bold.com, company behind popular solutions to help jobseekers find jobs, and help businesses find candidates – LiveCareer, Resume-Now, my Perfect Resume, Mighty Recruiter – inadvertently exposed part of its internal infrastructure used for project tracking and project management. On Au...

database elasticsearch

Gartner’s Legacy System Exposed Online

Bob Diachenko

August 26, 2019 0 Comments

On August 14th I have sent a responsible disclosure notice to Gartner, the world’s leading information technology research and advisory company, alerting them on a misconfigured Elasticsearch cluster with 1TB+ of data. According to Shodan and BinaryEdge search engines, database was set to pub...

Blog Data Breach database elasticsearch

Mysterious Chinese Dating Apps Targeting US Customers Expose 42.5 Million Records Online

Jeremiah Fowler

May 28, 2019 0 Comments

On May 25th I discovered a non password protected Elastic database that was clearly associated with dating apps based on the names of the folders. The IP address is located on a US server and a majority of the users appear to be Americans based on their user IP and geolocations. I also noticed Chine...

Blog Data Breach

Human Resources and employee management provider CavinHR leaks 400,000+ files including their customer’s employee files and internal employees.

Jeremiah Fowler

February 18, 2019 0 Comments

CavinHR had a data breach. Automation and technology is important to any business where time is money, but one thing to never overlook is cyber security. It is common knowledge in the business world that a company’s most valuable asset is their employees and their customers. You could imagine it w...

Security Discovery has identified thousands of incidents that involve exposed data and vulnerabilities. Many of these were overlooked or missed by some of the biggest security vendors in the industry. This gives us a unique perspective that we share with the security community, tech enthusiasts and everyday people who care about data and privacy.

Our security research mission is data protection, education, and raising awareness. We publish our findings to highlight the importance of cyber security and cyber hygiene best practices. For more information on our security research see our Privacy Policy.

Porn Blocking App Exposed User Data Online

Bold.com Exposed Its Internal Infrastructure

Gartner’s Legacy System Exposed Online

Mysterious Chinese Dating Apps Targeting US Customers Expose 42.5 Million Records Online

Human Resources and employee management provider CavinHR leaks 400,000+ files including their customer’s employee files and internal employees.

Follow Us

Quick Links

Contact Us

Subscribe