Updated Microsoft exposed a 6.5TB Elastic server to the world, including search terms, location coordinates, device ID data, and a partial list of which URLs were visited, earlier this month.
According to a report from security site WizCase, the server was password-protected until around 10 September, when "the authentication was removed".
WizCase code-prober Ata Hakcil discovered the leak on 12 September. The data appears to be generated by the Bing mobile app, which promises users "Getting rewarded is easy, just search with the Bing," and has been downloaded more than 10 million times from Google's Play Store. The data was growing by up to 200GB per day and included searches from people in more than 70 countries, according to WizCase.
Once the data was unsecured, several things happened. The infosec firm reported the problem to Microsoft ..
Support the originator by clicking the read the rest link below.
