Exactis Said To Have Exposed 340 Million Records

Exactis Said To Have Exposed 340 Million Records - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: General (https://sinister.li/Forum-General)
+--- Forum: World News (https://sinister.li/Forum-World-News)
+--- Thread: Exactis Said To Have Exposed 340 Million Records (/Thread-Exactis-Said-To-Have-Exposed-340-Million-Records)

Exactis Said To Have Exposed 340 Million Records - mothered - 06-28-2018

Greetings to all,

A firm named Exactis, Is reported to have publicly exposed a database of around 340 million records of user Information and critical credentials. It appears to be on quite a significant scale, namely affecting those who reside In the US.

Quote:If you're a US citizen, your personal information -- your phone number, home address, email address, even how many children you have -- may have just become easily available to hackers in an alleged massive data leak.

Florida-based marketing and data aggregation firm Exactis exposed a database containing nearly 340 million individual records on a publicly accessible server, Wired reported. Earlier this month, security researcher Vinny Troia found that nearly 2 terabytes of data was exposed, which seems to include personal information on hundreds of millions of US adults and millions of businesses, the report said.

"It seems like this is a database with pretty much every US citizen in it," Troia told Wired.

The alleged breach reportedly exposed highly personal information, such as people's phone numbers, home and email addresses, interests and the number, age and gender of their children.

Credit card information and Social Security numbers don't appear to have been leaked. Troia told Wired that he doesn't know where the data is coming from, "but it's one of the most comprehensive collections I've ever seen."

Source.

RE: Exactis Said To Have Exposed 340 Million Records - Vultra - 06-28-2018

Thank goodness i'm not in that mess or, located in US. I would change name, change phone number, everything that's on me.

For the CC and SSN to be leaked if that was the case, good luck to all the banks of customers wanting a new CC.
Got me thinking, how come the CC and SSN were not ever leaked although, they are encrypted but, why not the other data.

I don't understand why companies don't encrypt personal information as well, to protect the users under the company.

RE: Exactis Said To Have Exposed 340 Million Records - mothered - 06-28-2018

(06-28-2018, 09:55 AM)Mimiakira Wrote: Got me thinking, how come the CC and SSN were not ever leaked although, they are encrypted but, why not the other data.

Going by personal experience, over 90% of data In every entity (In the back-end/server-side) Is stored In plain text to some degree, Irrespective of It's nature.

A good example, Is this major estate company I've just compromised whilst multitasking on this board.

Spoiler:

Spoiler:

This Is simply posted as an awareness factor, and the fact that one's personal credentials can be accessed at any given point.

RE: Exactis Said To Have Exposed 340 Million Records - r0biba - 06-28-2018

Does anyone have access to the DB/files?