Latest Database news

Open Marketing Database Exposes 5 Million Personal Records

An unsecured MongoDB instance belonging to health insurance marketing website MedicareSupplement.com was discovered online last month containing as many as 5 million records. The data cache included personal information as well as health details.
- Ionut Ilascu
- June 28, 2019
- 03:04 AM
- 0
85.4GB Database Exposes Hotels' Internal Security Information

An unprotected server exposed for an unknown period security-related event logs and records of various hotel brands. The info originated from open-source intrusion detection systems (IDS) Wazuh handled by a hotel and resort management company.
- Ionut Ilascu
- May 31, 2019
- 11:37 AM
- 0
Over 12,000 MongoDB Databases Deleted by Unistellar Attackers

Over 12,000 unsecured MongoDB databases have been deleted over the last three weeks, with only a message left behind asking the owners of the databases to contact the cyber-extortionists to have the data restored.
- Sergiu Gatlan
- May 17, 2019
- 08:37 AM
- 1
Unsecured Survey Database Exposes Info of 8 Million People

An unsecured database has exposed the personal information of 8 million people from the U.S. who participated in online surveys, sweepstakes, and requests for free product samples.
- Lawrence Abrams
- May 16, 2019
- 02:54 PM
- 4
Malware Hosted in Google Sites Sends Data to MySQL Server

Security researchers found malware hosted on the Google Sites platform for building websites. The threat is a dropper for an information stealer that sends data to a MySQL server controlled by the attacker.
- Ionut Ilascu
- April 23, 2019
- 12:11 PM
- 0
Medical Information of Almost 150K Rehab Patients Exposed

Over 4.91 million documents containing personally identifiable information (PII) of addiction rehab patients were exposed by a misconfigured ElasticSearch database publicly accessible for more than two years, from mid 2016 to late 2018.
- Sergiu Gatlan
- April 22, 2019
- 12:05 PM
- 0
Unsecured Databases Leak 60 Million Records of Scraped LinkedIn Data

Eight unsecured databases were found leaking approximately 60 million records of LinkedIn user information. While most of the information is publicly available, the databases contain the email addresses of the LinkedIn users.
- Lawrence Abrams
- April 18, 2019
- 01:17 PM
- 4
New Xwo Web Scanner Helps MongoLock Ransomware Find Victims

Code and infrastructure from two known malware families have been observed with a new threat named Xwo, which helps operators of the MongoLock ransomware discover unprotected web services reachable over the internet.
- Ionut Ilascu
- April 04, 2019
- 03:34 AM
- 0
257K Legal Documents Leaked By Unprotected Elasticsearch Server

An unprotected 4.7 GB Elasticsearch cluster found on a US-based Amazon AWS server exposed 257,287 legal documents that came with a "not designated for publication" label.
- Sergiu Gatlan
- March 15, 2019
- 03:36 PM
- 0
Insecure Database Exposes 800,000 Singapore Blood Donors

The personal information of 808,201 blood donors who registered to donate since 1986 in Singapore was exposed after the database which contained it was left unprotected on an Internet-facing server for more than two months.
- Sergiu Gatlan
- March 15, 2019
- 01:08 PM
- 0
Unsecured API Leads to 'Yelp for Conservatives' App Data Leak

The API of the 63Red Safe mobile app known as "Yelp for conservatives" was found by French security researcher Robert Baptiste wide open, with no authentication needed to access and view the data stored within the app's database.
- Sergiu Gatlan
- March 12, 2019
- 04:19 PM
- 0
Creepy Database Lists 'BreedReady' Status for 1.8 Million Women

A database left unprotected online reveals a creepy set of details collected on more than 1.8 million women in China. Apart from the regular info one would expect, like name, age, and date of birth, the data set also includes a "BreedReady" status.
- Ionut Ilascu
- March 11, 2019
- 11:53 AM
- 2
Open MongoDB Databases Expose Chinese Surveillance Data

18 MongoDB databases with information generated by accounts on several online social services in China have been sitting on the web ready for plucking by anyone knowing where to look.
- Ionut Ilascu
- March 04, 2019
- 03:06 AM
- 0
MySQL Design Flaw Allows Malicious Servers to Steal Files from Clients

A design flaw in the file transfer interaction between a client host and a MySQL server allows the latter to request from the former any data the client user has read access to.
- Ionut Ilascu
- January 21, 2019
- 09:33 AM
- 1
Flaws in a Card Access Control System May Allow Hackers to Bypass Security

Vulnerabilities discovered in the PremiSys IDentity access system could render the building entrance security it provides useless. The vendor was warned about the flaws but still hasn't released the necessary patches.
- Ionut Ilascu
- January 15, 2019
- 05:28 AM
- 0
Unprotected MongoDB Exposes Over 200 Millions Resumes

A huge MongoDB database containing over 200 million records with resumes from job seekers in China stayed accessible without authentication for at least one week to anyone able to locate it. The size of the cache weighed 854GB.
- Ionut Ilascu
- January 10, 2019
- 09:00 AM
- 0
Millions of Voter Records Up for Sale Ahead of the US Midterm Elections

As the US midterm elections close in, the underground markets appear to be flush with voter databases available for affordable prices.
- Ionut Ilascu
- October 30, 2018
- 11:01 AM
- 0
Vending Machine App Hacked for Unlimited Credit

A hacker enticed by the payment method used by the vending machines located on a university campus found a way to get free credit after looking at the inner workings of the machine's accompanying mobile app.
- Ionut Ilascu
- October 16, 2018
- 05:55 PM
- 1
Illegal Patch Allows Easier Access to India's Aadhaar Biometric Database

Access to India's Aadhaar unique identity enrollment software is unrestricted to anyone for as much as $35 - the price of a debilitating patch for important security features.
- Ionut Ilascu
- September 14, 2018
- 11:43 AM
- 0
MongoDB Server Exposes Babysitting App's Database

The makers of Sitter, a popular app for connecting babysitters with parents, have involuntarily exposed the personal details of over 93,000 users.
- Catalin Cimpanu
- August 21, 2018
- 10:28 AM
- 0