![\"\"](\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2018\/12\/open-server-hack-resized.jpg\")
Bob Diachenko, the Director of Cyber Risk Research for Hacken, recently made a disturbing discovery.\u00a0 He found an ElasticSearch server open and vulnerable on the internet, without so much as a password to protect it.<\/p>\nBob Diachenko, the Director of Cyber Risk Research for Hacken, recently made a disturbing discovery.\u00a0 He found an ElasticSearch server open and vulnerable on the internet, without so much as a password to protect it.<\/p>\n
Unfortunately, the server was leaking a staggering 73GB of data and had a number of databases cached inside the server’s memory.\u00a0 In one of those databases, Diachenko discovered more than 56 million records containing personally identifiable information belonging to US citizens around the country.<\/p>\n
In the majority of cases, the exposed information was limited to:<\/strong><\/p>\n Sadly, to an even moderately talented hacker, that’s more than enough information to fake someone’s identity. That means the data has real value on the Dark Web and may be being sold off as you read these words.<\/p>\n Another of the databases contained nearly twenty-six million records containing business information.<\/p>\n In this case, the exposed information included:<\/strong><\/p>\n Diachenko made the discovery on November 20th, but upon further research discovered that it had actually been indexed by Shoddan on November 14th.\u00a0 He was not able to determine who owned the exposed server, but based on a few breadcrumbs he did find, he concluded that it’s likely owned by the Canadian data firm “Data and Leads,” or that the company is at least indirectly connected to the server somehow.<\/p>\n The firm did not respond to inquiries made by Diachenko, or later, by ZDNet. Shortly after those requests for comment were made, the company’s website mysteriously went down.<\/p>\n The apparent cause of this breach is the same thing that’s caused other recent ElasticSearch breaches.\u00a0 In a shocking number of cases, admins don’t bother to set up passwords for their servers, which they later leave exposed on the internet.\u00a0 An easy problem to fix, but it begs the question:\u00a0 Are your servers password protected?<\/p>\n","protected":false},"excerpt":{"rendered":" Bob Diachenko, the Director of Cyber Risk Research for Hacken, recently made a disturbing discovery.\u00a0 He found an ElasticSearch server open and vulnerable on the internet, without so much as a password to protect it. Unfortunately, the server was leaking a staggering 73GB of data and had a number of databases cached inside the server’s […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"yoast_head":"\n\n
\n