https://www.cyberscoop.com/elasticsearch-data-exposure-hacken/
By Jared Beinart
CYBERSCOOP
Nov 28, 2018
A data breach involving Elasticsearch search-engine technology exposed the
personal information of nearly 57 million people for at least two weeks,
according to report released Wednesday by the cybersecurity organization
Hacken.
The breach exposed 73 gigabytes of data as early as Nov. 14, Hacken said,
including the names, employers, job titles, emails, addresses, phone
numbers and IP addresses of 56,934,021 U.S. residents. There was a
separate cache of data titled "Yellow Pages," the report said, with 25
million records about businesses, including information such as names,
company details, zip addresses, latitude/longitude, census tract, phone
numbers, web addresses, emails, revenue numbers and more.
Hacken said it was unclear where the leak originated, but the formatting
of the data appeared to have similarities to fields used by Canadian data
management company Data & Leads. The database is no longer exposing
information to the public, Hacken said.
[...]
--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
https://twitter.com/infosecnews_
