Skip to main content

184 Million Records Database Leak: Microsoft, Apple, Google, Facebook, PayPal Logins Found

 The database’s exposure duration is unknown. Signs of infostealer malware were found, but no confirmed breach or misuse of user data, says cybersecurity researcher.

A leaked 47GB database has exposed more than 184 million records, potentially placing affected individuals at high risk of identity theft and cybercrime. The stolen login credentials include accounts from major global platforms such as Microsoft, Google, and Apple, as well as government and corporate email addresses spanning at least 29 countries.

Cybersecurity researcher Jeremiah Fowler discovered the exposed Elasticsearch database, which was quickly taken offline after he reported it. However, it remains unclear how long the database was publicly accessible or how many unauthorized parties may have accessed the data prior to its removal.




Fowler reported the massive, unprotected database to Website Planet, revealing hundreds of millions of entries containing user credentials. The data included credentials for bank accounts, health platforms, and government websites from multiple countries — exposing individuals to serious security threats, according to the researcher.

The database, which lacked both password protection and encryption, exposed credentials from major platforms also including Facebook, PayPal, and Netflix. In addition, it included more than 220 government-associated email addresses from countries such as the US, the UK, and China.

After Fowler alerted World Host Group, the hosting provider disabled access to the database to prevent further data exposure.

While the database is now offline, it is unknown how long it remained exposed before Fowler’s discovery,  or whether it was accessed or downloaded by malicious actors.

The hosting provider declined to disclose customer information, but Seb de Lemos, chief executive officer of World Host Group, confirmed to WIRED that the database was hosted on an unmanaged client-controlled server, and added that the company’s legal team is reviewing the incident in coordination with law enforcement authorities.

More info: 

Website Link: https://databasescientist.org/


 
_______________________________________________________________________________________________________________   

Social Media:













Comments

Popular posts from this blog

Large Language Models and Vector Databases for News Recommendations

Memory Management in Flutter: Best Practices and Pitfalls

NIH autism database announcement raises concerns among researchers