InfoSecBulletin Cybersecurity for mankind
Cybersecurity researcher Jeremiah Fowler discovered an unencrypted database with 38 GB of CSV and PDF files and reported it to Website Planet. The exposed data included hundreds of thousands of names, addresses, phone numbers, emails, and other sensitive information.
The publicly exposed database was not password-protected or encrypted. It contained 10,820 records, with a total size of 38 GB. The majority of the files were .csv spreadsheets containing many thousands or hundreds of thousands of rows of PII.
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
The database belonged to a Florida company called IMDataCenter, which offers data enhancement solutions for better marketing strategies, including lead scoring and identity management.
After sending a responsible disclosure, the database restricted from public access soon after and no longer accessible.
IMDataCenter said, Data security is really important to us too and really appreciate you sharing this information with us. We are working to secure the information ASAP”.
IMDataCenter’s website states that their data library features information from various verified public and proprietary sources, covering over 260 million individuals and 130 million households. The library includes 600 million email addresses, 550 million phone numbers (with 230 million mobile), 153 million property records, 208 million deeds, and details on 75 million homeowners.
The exposure of a large amount of personal information, such as names, addresses, emails, and phone numbers, poses serious privacy and cybersecurity risks. Verified data can identify individuals and create detailed profiles, which are valuable to both marketers and criminals for activities like phishing and identity theft.
