Some of Our Sources
- Team Treehouse
- Spoon Graphics
- Abduzeedo
- Vandelay Design
- Creative Curio
- Naldz Graphics
- Freelance Switch
- Web Resource Source
- Android Headlines
- Willems Lab
Help Webnuz
Referal links:
March 15, 2018 01:30 am
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/ccQ7c6upr7s/jewelry-site-leaks-personal-details-plaintext-passwords-of-13-million-users
Jewelry Site Leaks Personal Details, Plaintext Passwords of 1.3 Million Users
Chicago-based MBM Company's jewelry brand Limoges Jewelry has accidentally leaked the personal information for over 1.3 million people. This includes addresses, zip-codes, e-mail addresses, and IP addresses. The Germany security firm Kromtech Security, which found the leak via an unsecured Amazon S3 storage bucket, also claims the database contained plaintext passwords. The Next Web reports: In a press release, Kromtech Security's head of communicationis, Bob Diachenko, said: "Passwords were stored in the plain text, which is great negligence [sic], taking into account the problem with many users re-using passwords for multiple accounts, including email accounts." The [MSSQL database] backup file was named "MBMWEB_backup_2018_01_13_003008_2864410.bak," which suggests the file was created on January 13, 2018. It's believed to contain current information about the company's customers. Records held in the database have dates reaching as far back as 2000. The latest records are from the start of this year. Other records held in the database include internal mailing lists, promo-codes, and item orders, which leads Kromtech to believe that this could be the primary customer database for the company. Diachenko says there's no evidence a malicious third-party has accessed the dump, but that "that does not mean that nobody [has] accessed the data."Read more of this story at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/ccQ7c6upr7s/jewelry-site-leaks-personal-details-plaintext-passwords-of-13-million-users
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot