184 Million Records Database Leak: Microsoft, Apple, Google, Facebook, PayPal Logins Found
The database’s exposure duration is unknown. Signs of infostealer malware were found, but no confirmed breach or misuse of user data, says cybersecurity researcher.
A leaked 47GB database has exposed more than 184 million records, potentially placing affected individuals at high risk of identity theft and cybercrime. The stolen login credentials include accounts from major global platforms such as Microsoft, Google, and Apple, as well as government and corporate email addresses spanning at least 29 countries.
Cybersecurity researcher Jeremiah Fowler discovered the exposed Elasticsearch database, which was quickly taken offline after he reported it. However, it remains unclear how long the database was publicly accessible or how many unauthorized parties may have accessed the data prior to its removal.
Fowler reported the massive, unprotected database to Website Planet, revealing hundreds of millions of entries containing user credentials. The data included credentials for bank accounts, health platforms, and government websites from multiple countries — exposing individuals to serious security threats, according to the researcher.
After Fowler alerted World Host Group, the hosting provider disabled access to the database to prevent further data exposure.
While the database is now offline, it is unknown how long it remained exposed before Fowler’s discovery, or whether it was accessed or downloaded by malicious actors.
The hosting provider declined to disclose customer information, but Seb de Lemos, chief executive officer of World Host Group, confirmed to WIRED that the database was hosted on an unmanaged client-controlled server, and added that the company’s legal team is reviewing the incident in coordination with law enforcement authorities.
More info:
Website Link: https://databasescientist.org/
Comments
Post a Comment