- Insecure Netcore database exposed 40 billion records, including emails and bank notices
- Researcher Jeremiah Fowler discovered a 13TB database open without password protection.
- Netcore secured the database after contact; duration of exposure is unknown
More than 40 billion data records, including emails, IP addresses and banking activity notices, were leaked online.
Earlier this week, security researcher Jeremiah Fowler discovered a large, unencrypted database exposed online without any password protection, leaving sensitive records accessible to anyone with an internet connection. The database weighed around 13 terabytes and was owned by an Indian marketing company called Netcore Cloud Pvt. Ltd.
Only an internal audit could confirm whether the database has been accessed by cybercriminals. Fowler confirmed it was also possible for a third party to manage the database on Netcore’s behalf.
Large company
By analyzing a sample of the information stored in this database, Fowler discovered a lot of sensitive and personally identifiable information, which could put individuals at risk of identity theft or fraud.
This included banking notifications, employment-related messages, account verification emails, marketing messages, healthcare notifications, banking activity notices, mail log records (with email addresses and message subjects), partial account numbers, IP addresses, data labeled as “production,” and numerous records “marked as confidential.”
After identifying the owner of the database, Fowler contacted the company and locked it the same day, thanking the researcher for the information. He stressed that it’s unclear how long the database was open, or whether malicious actors found it before him.
Netcore is a fairly large marketing organization. It provides cloud-based tools that help businesses communicate with their customers through digital channels, primarily through email, SMS, WhatsApp, push notifications and in-app messages, while tracking and optimizing these interactions using AI and automation.
It is based in Mumbai, India but has offices around the world including Malaysia, UAE, UK and elsewhere, serving over 6,500 clients worldwide including big names such as Flipkart, Disney Hotstar, McDonald’s and others. According to some sources, Netcore will have reached $100 million in revenue and 5,000 customers in 2024.
Via Website Planet
Follow TechRadar on Google News And add us as your favorite source to get our news, reviews and expert opinions in your feeds. Make sure to click the Follow button!
And of course you can too follow TechRadar on TikTok for news, reviews, unboxings in video form and receive regular updates from us on WhatsApp Also.