InfoSecBulletin Cybersecurity for mankind
Cybersecurity researcher Jeremiah Fowler discovered an unencrypted database with 38 GB of CSV and PDF files and reported it to Website Planet. The exposed data included hundreds of thousands of names, addresses, phone numbers, emails, and other sensitive information.
The publicly exposed database was not password-protected or encrypted. It contained 10,820 records, with a total size of 38 GB. The majority of the files were .csv spreadsheets containing many thousands or hundreds of thousands of rows of PII.
CISA alerts to cyberattacks affecting U.S. water utilities
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
Massive customer data from India’s Bank of Baroda surfaced online
Active Exploits Hit Fortinet, Arista: AI Discovered Linux Kernel Zero-Day
Sam Altman Claims AI “singularity” has arrived, Where Systems Improve by Themselves
Shinyhunters claimed and set deadline to publish E&Y data
Microsoft, NVIDIA and CrowdStrike Initiate Alliance for Open-Source AI Security
Google Search Results Reportedly Show Claude AI Shared Chats
The database belonged to a Florida company called IMDataCenter, which offers data enhancement solutions for better marketing strategies, including lead scoring and identity management.
After sending a responsible disclosure, the database restricted from public access soon after and no longer accessible.
IMDataCenter said, Data security is really important to us too and really appreciate you sharing this information with us. We are working to secure the information ASAP”.
IMDataCenter’s website states that their data library features information from various verified public and proprietary sources, covering over 260 million individuals and 130 million households. The library includes 600 million email addresses, 550 million phone numbers (with 230 million mobile), 153 million property records, 208 million deeds, and details on 75 million homeowners.
The exposure of a large amount of personal information, such as names, addresses, emails, and phone numbers, poses serious privacy and cybersecurity risks. Verified data can identify individuals and create detailed profiles, which are valuable to both marketers and criminals for activities like phishing and identity theft.
