Database with 1.2 billion people’s data leaked online without password

Database with 1.2 billion people’s data leaked online without password

The database was available for anyone to access without a password.


Recently on October 16, 2019, a team of two dark web researchers named Bob Diachenko and Vinny Troia discovered a database containing a massive trove of personal records of more than 1.2 billion people.


While they were looking for exposures through BinaryEdge and Shodan, they stumbled upon the server which had an IP address that could be traced to Google Cloud Services. In total, the database was home to over 4 terabytes of data sitting in plain sight for public access.


Found on an exposed Elasticsearch server; the good news is that these records did not host login credentials, social security numbers or payment card details. A look at the details shared by researchers indicates that the data was scraped from social media platforms including Twitter, Facebook, LinkedIn and GitHub, a Git repository hosting service.

Additionally, it contains approximately 50 million phone numbers and 622 million email addresses, both unique without any duplication.


See: World’s largest data dump surfaces on web with 2.2 billion accounts


When it comes to the structure of the data found, it appears that four different data sets have been combined with three of them ..

Support the originator by clicking the read the rest link below.