October 28, 2019

Adobe database exposes 7.5 million Creative Cloud users

Adobe has become the latest company to be caught leaving an Elasticsearch database full of customer data exposed on the internet.

Naked Security

August 06, 2019

Attackers ransom bookseller’s exposed MongoDB database

Another database has fallen to extortion hackers, this time containing 2.1 million records belonging to Mexican bookseller, Librería Porrúa.

Naked Security

March 01, 2019

Dow Jones Watchlist of risky businesses exposed on public server

A company with access to the Dow Jones Watchlist of risky people and businesses left it on a public AWS server without a password.

Naked Security

January 17, 2019

Change your password! VoIP provider leaves huge database exposed online

A researcher has discovered an exposed database containing gigabytes of call logs, SMS data, and internal system credentials belonging to US Voice-over-IP (VoIP) service provider VOIPo.com.

Naked Security

January 10, 2017

Stolen details of 3.3m Hello Kitty fans – including kids – published online

A year after Sanrio promised that the records were safe, the database - including more than 186,000 children's details - has appeared online

Naked Security

October 21, 2016

Millions of AdultFriendFinder user accounts hacked – again

One hacker is claiming to have stolen a database of 73 million users: a whole lot of details for a whole lot of people who'd rather keep that bedroom door closed.

Naked Security

January 12, 2016

Ex-Cardinals exec: Yes, I hacked rival Astros’ database

Chris Correa, former scouting director, confessed to five counts of hacking and prying out confidential information.

Naked Security

December 22, 2015

3.3 million Hello Kitty fans exposed in database leak

If you or your children are Hello Kitty fans, change your password, and your password-reset question and answer pairs, now!

Naked Security

October 12, 2015

Lyft: It wasn’t our CTO who cracked Uber’s database

Uber's sleuthing didn't reveal the hand of Lyft's CTO in the cookie jar, but an unidentified party at his IP address allegedly eyed the key.

Naked Security