Category Archives: data exposure

AT&T, Verizon Subscribers Exposed as Mobile Bills Turn Up on the Open Web

Posted on December 5, 2019 by Tara Seals

Names, addresses, phone numbers, call and text message records and account PINs were all caught up in a cloud misconfiguration. Continue reading AT&T, Verizon Subscribers Exposed as Mobile Bills Turn Up on the Open Web→

7M Adobe Creative Cloud Users Exposed to Hackers

Posted on October 25, 2019 by Tara Seals

An open cloud database sets the stage for phishing attacks for users of the subscription service. Continue reading 7M Adobe Creative Cloud Users Exposed to Hackers→

Intimate Details on Healthcare Workers Exposed as Cloud Security Lags

Posted on October 8, 2019 by Tara Seals

Ponemon survey data shows that only a third of IT staff say they take a security-first approach to data storage in the cloud. Continue reading Intimate Details on Healthcare Workers Exposed as Cloud Security Lags→

News Wrap: Deepfake CEO Voice Scam, Facebook Phone Data Exposed

Posted on September 6, 2019 by Lindsey O'Donnell

From deepfake to data exposures, the Threatpost team talks about the top security trends driving this week’s biggest news stories. Continue reading News Wrap: Deepfake CEO Voice Scam, Facebook Phone Data Exposed→

Data Leak Impacts Millions of Yves Rocher Cosmetics Company Customers

Posted on September 3, 2019 by Lindsey O'Donnell

International cosmetics brand Yves Rocher found itself caught in a third-party data exposure incident that leaked the personal information of millions of customers. Continue reading Data Leak Impacts Millions of Yves Rocher Cosmetics Company Customers→

Imperva Firewall Breach Exposes Customer API Keys, SSL Certificates

Posted on August 27, 2019 by Tara Seals

The issue impacts users of the vendor’s Cloud WAF product. Continue reading Imperva Firewall Breach Exposes Customer API Keys, SSL Certificates→

GE Aviation Passwords, Source Code Exposed in Open Jenkins Server

Posted on July 8, 2019 by Lindsey O'Donnell

A DNS misconfiguration resulted in an open Jenkins server being available to all. Continue reading GE Aviation Passwords, Source Code Exposed in Open Jenkins Server→

Dating App Jack’d Fined After Leaking Users’ Nude Pics

Posted on July 1, 2019 by Lindsey O'Donnell

LGBQT dating app Jack’d has been slapped with a $240,000 fine on the heels of a data breach that leaked personal data and nude photos of its users. Continue reading Dating App Jack’d Fined After Leaking Users’ Nude Pics→

MongoDB Leak Exposed Millions of Medical Insurance Records

Posted on June 28, 2019 by Lindsey O'Donnell

Millions of records containing personal information and medical insurance data were exposed by a database belonging to insurance marketing website MedicareSupplement.com. Continue reading MongoDB Leak Exposed Millions of Medical Insurance Records→

Leaky Amazon S3 Buckets Expose Data of Netflix, TD Bank

Posted on June 27, 2019 by Lindsey O'Donnell

Netflix, TD Bank, and Ford were only a few of the companies whose data was exposed by three leaky Amazon S3 buckets owned by Attunity. Continue reading Leaky Amazon S3 Buckets Expose Data of Netflix, TD Bank→