News and Updates on Information Technology

United States – Digital Point

Exploit: Unsecured Database
Digital Point: Webmaster Community Platform 

Risk to Small Business: 2.303 = Severe

In July 2020, an internet researcher found an unsecured Elasticsearch database containing over 62 million records. In total, data belonging to 863,412 Digital Point users was included in the leak. Names, email addresses, and internal user ID numbers for forum users were made publicly available. The leak also exposed details for thousands of internal records and reported user posts.

Individual Risk: 2.787 = Severe

While no financial information was exposed, but the data that was exposed, especially the post data, could be used in spear phishing attacks.

Customers Impacted: 863,412

How it Could Affect Your Customers’ Business: An unsecured database points to sloppy data handling practices at a company, making customers or users less likely to want to trust that company with their personal information in the future.