58 Million Personal Records Posted Online
Posted by: Timothy Weaver on 10/15/2016 10:57 AM
[
Comments
]
A hacker that calls himself 0x2Taylor, on Twitter, has published personal information that included names, dates of birth, email and postal addresses, job titles, phone numbers, vehicle data, and IP addresses from an online database.
The database was stolen from Modern Business Systems (MBS). The company stores data for businesses that are looking for online data storage and database hosting solutions.
The hacker has posted the personal data for 58 million users. Researchers are claiming that MBS was running an unsecured MongoDB database, open for anyone to access.
If you are worried that your data has been compromised, you can check out Troy Hunt's “Have I Been Pwned?” service.
This may not be the end of the breach. Researchers were able to have a conversation with 0x2Taylor who showed them that he had access to another database containing over 258 million rows of personal records.
There will probably be more announcements of hacks due to the fact that the MongoDB is too frequently not protected. The use of search engines like Shodan has made it easier for hackers to identify internet-connected systems that are unsecured. These databases should not be visible to the outside world.
Source: TripWire

The hacker has posted the personal data for 58 million users. Researchers are claiming that MBS was running an unsecured MongoDB database, open for anyone to access.
If you are worried that your data has been compromised, you can check out Troy Hunt's “Have I Been Pwned?” service.
This may not be the end of the breach. Researchers were able to have a conversation with 0x2Taylor who showed them that he had access to another database containing over 258 million rows of personal records.
There will probably be more announcements of hacks due to the fact that the MongoDB is too frequently not protected. The use of search engines like Shodan has made it easier for hackers to identify internet-connected systems that are unsecured. These databases should not be visible to the outside world.
Source: TripWire
Comments