InfoSecBulletin Cybersecurity for mankind
Cybersecurity researcher Jeremiah Fowler discovered an unencrypted database with 38 GB of CSV and PDF files and reported it to Website Planet. The exposed data included hundreds of thousands of names, addresses, phone numbers, emails, and other sensitive information.
The publicly exposed database was not password-protected or encrypted. It contained 10,820 records, with a total size of 38 GB. The majority of the files were .csv spreadsheets containing many thousands or hundreds of thousands of rows of PII.
Daily Cyber security update for 14.11. 2026
Huge European telecom leak exposes clients of Swedbank, SEB, airBaltic, and other companies
PHP2Shell attack exploited a Check Point 0-day to deploy malware
North Korean hackers steal more than $400 million using video images, FBI says
Microsoft’s November 2026 Patch Tuesday addresses 1,093 flaws, with Outlook zero-day
Barracuda ESG flaws exploited, gaining root access
Apple, SAP, and Ivanti Patch Critical flaws Affecting Messaging, Bluetooth, and Enterprise Systems
Jailbroken DeepSeek AI Agent Conducts Two-Week Cyberattack on European Telecom
Daily Cyber security update for 10.11. 2026
IBM fixes 208 API Connect vulnerabilities, 47 critical
The database belonged to a Florida company called IMDataCenter, which offers data enhancement solutions for better marketing strategies, including lead scoring and identity management.
After sending a responsible disclosure, the database restricted from public access soon after and no longer accessible.
IMDataCenter said, Data security is really important to us too and really appreciate you sharing this information with us. We are working to secure the information ASAP”.
IMDataCenter’s website states that their data library features information from various verified public and proprietary sources, covering over 260 million individuals and 130 million households. The library includes 600 million email addresses, 550 million phone numbers (with 230 million mobile), 153 million property records, 208 million deeds, and details on 75 million homeowners.
The exposure of a large amount of personal information, such as names, addresses, emails, and phone numbers, poses serious privacy and cybersecurity risks. Verified data can identify individuals and create detailed profiles, which are valuable to both marketers and criminals for activities like phishing and identity theft.
