Gareth Corfield reports: An email marketing company claiming to hold details on a million UK teachers and school admin personnel was potentially exposing those to the public internet thanks to a misconfigured error page on its website. Not only that, but the Schools Marketing Company (SMC) seemingly dismissed the findings of the infosec company which…
Category: Exposure
Informed of a data leak in July, Brazilian integrator platform continued to expose more than 1.75 billion files
Updated at 11:11 am: DataBreaches.net has been informed the data have been secured. Remember when the Brazilian government complained about Raid Forums for posting so many leaks and data dumps from Brazil? If this one ever shows up on Raid Forums, they will probably go nuts. Safety Detectives reports: The Safety Detectives cybersecurity team, led by Anurag Sen,…
Missouri Teachers’ Social Security numbers at risk on state agency’s website; state’s response is to shoot the messenger?
Josh Renaud reports: The Social Security numbers of school teachers, administrators and counselors across Missouri were vulnerable to public exposure due to flaws on a website maintained by the state’s Department of Elementary and Secondary Education. The Post-Dispatch discovered the vulnerability in a web application that allowed the public to search teacher certifications and credentials…
350 Qld border-pass applicants caught in police privacy breach
Matt Dennien reports: The Queensland Police Service has again been caught up in a privacy breach, this time involving the email addresses of more than 350 people – including AFP, Defence and Queensland Health staff –trying to return to Queensland. Read more on The Age. So after telling recipients to keep the invitation hush-hush, they…
Parents furious after personal information is leaked in 2nd data breach in online program
Rachel Keller reports: The Virginia Department of Behavioral Health and Developmental Services (DBHDS) is now investigating after some residents’ personal information was leaked in a data breach of one of their online programs. At 10 a.m. on Thursday, Oct. 7, families on the waiting list to receive Individual and Family Support Program funding logged onto the…
Telegraph newspaper bares 10TB of subscriber data and server logs to world+dog
Gareth Corfield reports: The Telegraph newspaper managed to leak 10TB of subscriber data and server logs after leaving an Elasticsearch cluster unsecured for most of September, according to the researcher who found it online. The blunder was uncovered by well-known security researcher Bob Diachenko, who said that the cluster had been freely accessible “without a…