Security researcher has discovered a huge database containing 11 million records of personal data unsecured and publicly accessible to anyone
Security researcher has discovered a huge database containing 11 million records of personal data unsecured and publicly accessible to anyone. The database was discovered by security researcher Bob Diachenko in an unsecured MongoDB server and appears to belong to an email marketing firm. The database contained 43.5GB of data which includes 10,999,535 email addresses, first and last name, gender, physical address, ZIP code, state and city of residence. All the email address found on the database were Yahoo based, and database also contained DNS details about the email status. According to shodan search engine, the database has been left exposed online since September 13 and has been tagged as a compromised server. The database also contained a ransom note asking it owners to pay 0.4 BTC for recovering the data. The researcher said that at the time discovery of the database all the data was intact and which assumes that this was a result of script failure scenario. The ownership of the database remains unknown, and in some of the records, there were some hints linking to SaverSpy websites. The origin of data remains unknown, as database name itself did not give any clues as of potential owner. Also, data did not contain any administrator emails, system logs or host information. One hint was given in the description of the lists in which a particular email was part of - "Yahoo_090618_ SaverSpy" said in the blog post published by the researcher, SaverSpy is a website powered by Coupons.com and provide printable and digital coupons for a wide range of products. The researcher said he had notified both the companies about the database. The database has been taken offline now. Last week Diachenko had discovered another database belonging data management firm Veeam unsecured and publicly exposed. The database contained 200gb of data which includes 445 million records of personal data. For the latest cyber threats and the latest hacking news please follow us on Facebook and Twitter.
You may be interested in reading:42 Million Records of Credential Stuffing Data Discovered on the Free Hosting Service Kayo.moe