InfoSecBulletin Cybersecurity for mankind
Cybersecurity researcher Jeremiah Fowler discovered an unencrypted database with 38 GB of CSV and PDF files and reported it to Website Planet. The exposed data included hundreds of thousands of names, addresses, phone numbers, emails, and other sensitive information.
The publicly exposed database was not password-protected or encrypted. It contained 10,820 records, with a total size of 38 GB. The majority of the files were .csv spreadsheets containing many thousands or hundreds of thousands of rows of PII.
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
The database belonged to a Florida company called IMDataCenter, which offers data enhancement solutions for better marketing strategies, including lead scoring and identity management.
After sending a responsible disclosure, the database restricted from public access soon after and no longer accessible.
IMDataCenter said, Data security is really important to us too and really appreciate you sharing this information with us. We are working to secure the information ASAP”.
IMDataCenter’s website states that their data library features information from various verified public and proprietary sources, covering over 260 million individuals and 130 million households. The library includes 600 million email addresses, 550 million phone numbers (with 230 million mobile), 153 million property records, 208 million deeds, and details on 75 million homeowners.
The exposure of a large amount of personal information, such as names, addresses, emails, and phone numbers, poses serious privacy and cybersecurity risks. Verified data can identify individuals and create detailed profiles, which are valuable to both marketers and criminals for activities like phishing and identity theft.
