Misconfigured Supabase database allowing full read/write access to all platform data resulted in a data leak that exposed some 1.5 million API authentication tokens along with 35,000 email addresses and about 4,000 private messages.
Security researchers have discovered a publicly accessible Amazon S3 storage bucket that contains records of over 273,000 transfers taking place at banks in India, some of which have highly sensitive financial information in them.
A 2022 data leak that prompted the secret relocation of thousands of Afghans to the UK is only just now coming to light. A “superinjunction” that was granted by the UK High Court gagged a number of media sources from reporting not just on the data leak, but on the existence of the court order itself.
Many questions remain about the data leak: if it was in fact the work of a former employee, if it was a matter of revenge for Musk’s sweeping layoffs, and if the entirety of the new information is in fact new and accurate.
Chunks of Disney’s internal Slack messaging are being released to the public via BitTorrent, and surprisingly the Russia-based hacking group behind the data leak does not seem interested in a ransom.
A backup carrier for cloud-based communications platform Twilio was found to have an AWS S3 bucket open to the internet for several days, exposing “SMS-related” data including millions of one-time client passwords.
While about 7.6 million current AT&T customers are impacted by the data leak, the vast majority (65.4 million) are former customers from before the start of 2020. Aside from partial SSNs, the most worrying item in the data leak is the account passcodes.
The new MOAB is by far the largest COMB or “combo file” spans some 26 billion records in total and seems to include nearly all of the big data leaks of the past decade and beyond.
The core of this data leak is an oversight in creating SAS tokens for sharing purposes. The AI researchers had properly secured the account in all other aspects, but did not seem to realize that a URL shared on GitHub was misconfigured.
Thousands of police officers, including some that work with MI5 on anti-terrorism cases, have had their names and work locations exposed in the Police Service of Northern Ireland (PSNI) data leak and may be targeted by violence as a result.