U

UpGuard Data Breach Research

https://www.upguard.com/breaches/rss.xml (RSS订阅地址)

Following Orders: A Day in the Life of an Iranian Telegram Bot Farm | UpGuard

Inside 24 hours of an Iranian Telegram bot farm: how a misconfigured server exposed the operation selling fake followers to financial scammers.

2026/7/31
阅读更多

Adult Supervision: How OnlyFans Takedowns Quietly Police Compromised Domains | UpGuard

Adult-content creators filing DMCA takedowns are inadvertently exposing thousands of compromised .gov and .edu sites used for parasite SEO scams.

2026/7/28
阅读更多

Open House: How an Unauthenticated MCP Server Exposed India's Largest Real Estate Platform | UpGuard

An exposed DBHub instance leaked millions of records from India's largest real estate platform—the biggest MCP server breach to date.

2026/7/21
阅读更多

Own Goal: Inside the Cyber Risks of the 2026 World Cup | UpGuard

Free World Cup streams and black-market betting sites are leaking fan data. UpGuard research reveals the hidden cyber risks of the 2026 tournament.

2026/7/6
阅读更多

Breaking Confinement: How a Corrections Vendor Exposed Inmate Communications | UpGuard

An exposed Azure storage bucket contained millions of documents sent through a jail messaging app, including driver's licenses used for identity verification.

2026/6/2
阅读更多

Shared Context: How an MCP Server Exposed a Private Equity Firm | UpGuard

A misconfigured MCP server provided complete access to a private equity firm's data lake, illustrating the unique risks of AI adoption for specialized knowledge workers.

2026/5/18
阅读更多

Read Receipts: How Mail Server Logs Put Corporate Clients at Risk | UpGuard

A publicly accessible server with email logs reveals how much information such infrastructure holds–including evidence of attackers looking for it.

2026/4/30
阅读更多

Shared Enemy: Inside a Chinese Dark Web Monitoring Database | UpGuard

An exposed database of dark web threat intel reveals how China responds to the common threat of the cyber-criminal underground.

2026/4/1
阅读更多

Social Insecurity: Billions of Social Security Number and Passwords | UpGuard

UpGuard research found a trove of sensitive information in an exposed Elastic database. Getting to the bottom of what it meant led us down an interesting path.

2026/2/19
阅读更多

Streamlit: The Tip of The Shadow AI Iceberg | UpGuard

Tens of thousands of AI-enabled web applications using the Streamlit framework are publicly available, exposing PII and other confidential data.

2025/12/9
阅读更多

Identifying Companies Affected by the Shai-Hulud NPM Supply Chain Attack | UpGuard

Using Github event archives, UpGuard Research identifies companies with indicators of compromise of the Shai-Hulud attacks, even after the repos have been deleted.

2025/10/24
阅读更多

Unclaimed Property: How an Unknown Entity Exposed Indian Banking Information | UpGuard

UpGuard discovered a rapidly growing data leak of bank accounts in India– and no one to take responsibility for it.

2025/9/26
阅读更多

Traffic Patterns: The Leakzone Part 2 | UpGuard

UpGuard analyzes the universities, governments, and private companies mentioned in the access logs of hacker forum Leakzone.

2025/8/12
阅读更多

Insufficient Coverage: WorkCycle, Langflow, and TPL | UpGuard

UpGuard can now report that we have secured a Langflow instance leaking data for around 97,000 insurance customers in Pakistan.

2025/8/12
阅读更多

The AggregateIQ Files, Part Four: Northwest Passage | UpGuard

Learn more about how a data exposure from within Cambridge Analytica-linked firm AggregateIQ reveals web assets built for Canadian politicians and parties.

2025/8/5
阅读更多

Aptly Named: How the Leakzone Exposed Access Logs | UpGuard

UpGuard discovered an unauthenticated Elasticsearch database containing 22 million records of user traffic for hacking forum leakzone.net.

2025/7/26
阅读更多

Black Box, Red Disk: How Top Secret NSA and Army Data Leaked Online | UpGuard

A sensitive S3 bucket left wide open, containing highly classified 'NOFORN' data, was discovered by the UpGuard team.

2025/7/26
阅读更多

Household Names: How Tetrad Exposed Data on 120 Million Consumers | UpGuard

A collection of data sets detailing the purchasing habits and consumer behavior profiles of 120 million American households was exposed by Tetrad.

2025/7/26
阅读更多

Clinical Trials: How Personal Information for Thousands of Australians was Exposed | UpGuard

A company that matches individuals with clinical trials in Australia and New Zealand exposed personal information on over 37,000 people via a misconfigured MongoDB.

2025/7/26
阅读更多

Political History: How A Democratic Organization Leaked Six Million Email Addresses | UpGuard

An AWS S3 bucket configured for public access contained a file from 2010 with six million email addresses, apparently from the Democratic Senatorial Campaign Committee.

2025/7/26
阅读更多

The Aggregate IQ Files, Part One: How a Political Engineering Firm Exposed Their Code Base | UpGuard

Political data firm AggregateIQ exposed IT assets that raise questions for society about how technology is being used in recent US political history.

2025/7/26
阅读更多

Cut Cord: How Viacom's Master Controls Were Left Exposed | UpGuard

An internet-exposed Puppet master and secret keys left the media empire's cloud assets vulnerable to exploitation.

2025/7/26
阅读更多

Medical Procedure: How a Misconfigured Storage Bucket Exposed Medical Data | UpGuard

Thousands of files including medical, business, and legal data were exposed via a misconfigured AWS S3 storage bucket.

2025/7/26
阅读更多

Identity and Access Misstep: How an Amazon Engineer Exposed Credentials and More | UpGuard

An AWS engineer uploaded personal information and system credentials to GitHub. UpGuard notified AWS Security to secure the data.

2025/7/26
阅读更多

The AggregateIQ Files, Part Two: The Brexit Connection | UpGuard

Learn more about how the exposed files of data firm AggregateIQ cast light on the world of British politics.

2025/7/26
阅读更多

Open Enrollment: How HCL Exposed Employee Passwords and Project Data | UpGuard

The UpGuard data breach research team discovered and secured leaks from IT services provider HCL, including new employee passwords.

2025/7/26
阅读更多

LA Confidential: How Leaked Emergency Call Records Exposed LA County's Abuse & Crisis Victims | UpGuard

Learn how 3.5 million records were exposed by Los Angeles County 211, including names, addresses, and call notes detailing reports of abuse and crisis.

2025/7/26
阅读更多

Short Circuit: How a Robotics Vendor Exposed Confidential Data for Major Manufacturing Companies | UpGuard

Manufacturing companies rely on robotics automation to power their factories and ultimately, their businesses. See how one robotics vendor exposed confidential information for over 100 clients, including divisions of Toyota, Ford, GM, and Tesla.

2025/7/26
阅读更多

Credit Crunch: Detailed Financial Histories Exposed for Thousands | UpGuard

111 GB of internal customer information from National Credit Federation was left exposed in a publicly downloadable data repository. This is its story.

2025/7/26
阅读更多

The Chicago Way: An Electronic Voting Firm Exposes 1.8M Chicagoans | UpGuard

UpGuard has identified an exposure of Chicago voters' personal information by an electronic voting machine firm.

2025/7/26
阅读更多

Public Option: How Medical Records and Patient-Doctor Recordings Were Exposed | UpGuard

The intersection of information technology and healthcare creates new and improved functionality for managing and delivering healthcare services, but it also entails new risks. See how one telemedicine company exposed thousands of medical records and hundreds of patient-doctor recordings online.

2025/7/26
阅读更多

The AggregateIQ Files, Part Three: A Monarch, A Peasant, and a Saga | UpGuard

Learn for the first time about the secret tools developed by AggregateIQ for purposes of tracking and influencing internet users, including on Facebook.

2025/7/26
阅读更多

Overboard: How Tea Party Campaign Assets Were Exposed Online | UpGuard

Read how a misconfigured Amazon S3 bucket exposed strategy documents and voter call lists for the Tea Party Citizen's Fund.

2025/7/26
阅读更多

Block Buster: How A Private Intelligence Platform Leaked 48 Million Personal Data Records | UpGuard

Learn how over 48 million records containing personal data leaked from within the systems of a private intelligence search service.

2025/7/26
阅读更多

Public Relations: How a Marketing & PR Platform Exposed Thousands of Users | UpGuard

A misconfigured Amazon S3 storage bucket leaked data from iPR Software, exposing tens of thousands of user accounts and client documents.

2025/7/26
阅读更多

Health Risk: How a Medical Practice Exposed Details for 40,000 Patients | UpGuard

Data from a Huntingon, NY medical practice was left publicly exposed via a misconfigured rsync server, exposing information about staff and forty thousand patients.

2025/7/26
阅读更多

HR Violation: How a Corporate Data Exposure Can Affect Employees | UpGuard

UpGuard discovered and helped secure an Australian company's code repository containing SQL backups of employee information, banking data, and more.

2025/7/26
阅读更多

Police Procedural: How South Carolina Arrest Records Were Exposed | UpGuard

Everyone who depends on tech assumes its risks. The justice system is no exception. See how detailed arrest records for South Carolina were exposed online.

2025/7/26
阅读更多

Out of Pocket: How an ISP Exposed Administrative System Credentials | UpGuard

ISPs do more than provide internet service for individual customers-- they can also act as part of US critical infrastructure. See how one ISP exposed their administrative and root passwords to the public.

2025/7/26
阅读更多

Spy Games: How Booz Allen Hamilton Exposed Pentagon Access Keys | UpGuard

While this blog post provides a description of a data exposure discovery involving Booz Allen Hamilton and the US National Geospatial-Intelligence Agency (NGA), this is no longer an active data breach.

2025/7/26
阅读更多

Public Domain: How Configuration Information For the World's Largest Domain Name Registrar Was Exposed | UpGuard

The UpGuard Cyber Risk Team has discovered and secured a data exposure of documents appearing to describe GoDaddy infrastructure running in the Amazon AWS cloud, preventing any future exploitation of this information.

2025/7/26
阅读更多

Cloud Leak: How A Verizon Partner Exposed Millions of Customer Accounts | UpGuard

Account details for up to 14 million Verizon customers have been left totally exposed by a third-party vendor.

2025/7/26
阅读更多

Insecure: How A Private Military Contractor's Hiring Files Leaked | UpGuard

Thousands of resumes belonging to individuals applying to security firm TigerSwan were found publicly exposed in an AWS S3 bucket.

2025/7/26
阅读更多

Double Indemnity: How An Insurer Exposed Its Customers | UpGuard

A shared-risk property insurance provider in Maryland left exposed data revealing the personal details of thousands of customers.

2025/7/26
阅读更多

Out of Commission: How the Oklahoma Department of Securities Leaked Millions of Files | UpGuard

A storage server configured for public access exposed millions of files belonging to the Oklahoma Securities Commission.

2025/7/10
阅读更多

Learning Curve: How Personal Data for One Million Individuals Was Exposed | UpGuard

Learn how the personal information of over one million individuals was exposed online, through a marketing network geared towards internet users interested in higher education.

2025/7/10
阅读更多

Telecommunications Breakdown: How Russian Telco Infrastructure was Exposed | UpGuard

A storage device containing 1.7 terabytes of information detailing telecommunications installations throughout the Russian Federation was exposed to the public internet.

2025/7/10
阅读更多

Losing Face: Two More Cases of Third-Party Facebook App Data Exposure | UpGuard

Third-party Facebook apps gather Facebook data about the people who use them. While Facebook struggles to contain these exposures, insecure third-party data practices & misconfigured cloud systems continue to leak Facebook data to the internet. See how UpGuard discovered and secured two such cases.

2025/7/10
阅读更多

The RNC Files: Inside the Largest US Voter Data Leak | UpGuard

UpGuard has discovered an open database containing information on what appear to be approximately 198 million American voters left misconfigured by a GOP analytics firm.

2025/7/10
阅读更多

Home Economics: How Life in 123 Million American Households Was Exposed Online | UpGuard

This cloud leak reveals the personal details of 123 million US households, revealing in-depth analysis of their finances sold by credit reporting agency Experian.

2025/7/10
阅读更多

Cloud Leak: WSJ Parent Company Dow Jones Exposed Customer Data | UpGuard

Sensitive data points on millions of Dow Jones publication customers were exposed in a massive cloud leak.

2025/7/10
阅读更多

System Shock: How A Cloud Leak Exposed Accenture's Business | UpGuard

Multiple sensitive buckets belonging to the corporation were found publicly exposed, revealing credentials, keys, and customer information.

2025/7/10
阅读更多

Data Warehouse: How a Vendor for Half the Fortune 100 Exposed a Terabyte of Backups | UpGuard

Backups ensure data continuity, but they're also a surface of risk. See how Fortune 100 vendor Attunity exposed nearly a terabyte of internal backups.

2025/7/10
阅读更多

Blackout: Engineering Firm Exposes Critical Infrastructure Data | UpGuard

An unprotected backup at a Texas engineering firm exposes critical infrastructure data and information on sensitive clients serving the state.

2025/7/10
阅读更多

Dark Cloud: Inside The Pentagon's Leaked Internet Surveillance Archive | UpGuard

As soon as the UpGuard Cyber Risk Team notified the Defense Department of this publicly exposed information, immediate action was taken, securing the open buckets and preventing further access.

2025/7/10
阅读更多

The Force that Surrounds Us: The AI Supply Chain from My Jedai to Canva | UpGuard

UpGuard can now report that it has secured a Chroma database containing 341 collections of data for AI applications, including a survey of Canva Creators.

2025/6/23
阅读更多

Watching the Watcher: How a Security Company Leaked Customer Data | UpGuard

UpGuard can now report that it has secured an Elasticsearch database containing data from APIsec.ai, a security company that claims to be used by 80% of the Fortune 100.

2025/6/23
阅读更多

Sixth Sense: GPS and AI Data Exposed for Assistive Devices | UpGuard

UpGuard can now report that it has secured an Elasticsearch database for AngelSense, a GPS tracker for children and adults with special needs.

2025/6/23
阅读更多

Campaign Gaffe: How a Voter Contact App Exposed Credentials and Code | UpGuard

The source code for a voter contact app was left publicly accessible, exposing credentials, code, and the app's development history.

2024/11/20
阅读更多

Mobile Data: How a Quiz App Exposed Account Details for Millions | UpGuard

Data from TVSmiles, a German mobile application for delivering gamified advertisements, exposed a database including personally identifiable information.

2024/11/20
阅读更多

Stolen Data: National PTA Database Available on Dark Web | UpGuard

On May 13th, UpGuard discovered a new set of data recently posted on a prominent dark web forum, this time allegedly belonging to the National Parent Teacher Association.

2024/11/20
阅读更多

Debt Collection: How an Unsecured ElasticSearch Instance Exposed Thousands of Borrowers | UpGuard

UpGuard can now report an ElasticSearch instance used as data storage for the debt collection system ENCollect has been secured. The server contained data about loans from multiple Indian and African financial services companies that had apparently been sent to ENCollect for collection. The data totalled 5.8GB in storage size and contained a total of 1,686,363 records. Those records included personal information like name, loan amount, date of birth, account number, and more.

2024/11/20
阅读更多

Student Applications: How an Education Software Company Exposed Millions of Files | UpGuard

UpGuard can now report that a public Google Cloud Storage bucket containing approximately 1.5 terabytes of data used to administer funding programs for college students has been secured. The bucket belonged to SmarterSelect, a company that provides software for managing the application process for scholarships, grants, and awards. The more than 2.8 million files included documents like transcripts, resumes, personal essays, tax returns, and invoices for approximately 1.2 million applications to funding programs.

2024/11/20
阅读更多

By Design: How Default Permissions on Microsoft Power Apps Exposed Millions | UpGuard

38 million records were exposed in multiple data leaks resulting from misconfigured Microsoft Power Apps portals. Data included sensitive information such as COVID-19 contact tracing data, COVID-19 vaccination appointments, social security numbers for job applicants, employee IDs, and millions of names and email addresses.

2024/11/20
阅读更多

Florida County Database Mistake: Election Officials’ Logins Among Exposed Data | UpGuard

UpGuard can now disclose that an Amazon S3 storage bucket containing publicly exposed backups of systems representing the intranet and web presence for Martin County, Florida has been secured.

2024/11/20
阅读更多

The Medibank Data Breach (Complete Timeline of Events) | UpGuard

A comprehensive breakdown of all the events unfolding from the Medibank data breach.

2024/11/20
阅读更多

Cloud Burst: Software Delivery via Public Cloud Storage | UpGuard

Analytical software provider Birst exposed an appliance in an S3 bucket.

2024/11/20
阅读更多

Bad Influence: How A Marketing Startup Exposed Thousands of Social Media Stars | UpGuard

UpGuard has discovered a cloud leak from Paris-based digital marketing startup Octoly exposing the personal details of thousands of social media personalities.

2024/11/20
阅读更多

Digital Gangsters, Disinformation and Dark Adverts: The UK Parliament DCMS Report | UpGuard

Based on UpGuard's data breach research, the UK Parliament’s DCMS Committee prepared and published the final report detailing their 18 month investigation into online disinformation and the privacy practices of platforms such as Facebook. Read about the report, and the AggregateIQ breach discovery.

2024/11/20
阅读更多

Enterprise Scale: How Public Storage Buckets Leaked Private Credentials | UpGuard

Several large storage buckets under the control of Hortonworks were configured for public access, exposing credentials and other internal data.

2024/11/20
阅读更多