Data Breaches

A collection of data sets detailing the purchasing habits and consumer behavior profiles of 120 million American households was exposed by Tetrad.

An AWS engineer uploaded personal information and system credentials to GitHub. UpGuard notified AWS Security to secure the data.

Everyone who depends on tech assumes its risks. The justice system is no exception. See how detailed arrest records for South Carolina were exposed online.

A misconfigured Amazon S3 storage bucket leaked data from iPR Software, exposing tens of thousands of user accounts and client documents.

ISPs do more than provide internet service for individual customers-- they can also act as part of US critical infrastructure. See how one ISP exposed their administrative and root passwords to the public.

A storage device containing 1.7 terabytes of information detailing telecommunications installations throughout the Russian Federation was exposed to the public internet.

An AWS S3 bucket configured for public access contained a file from 2010 with six million email addresses, apparently from the Democratic Senatorial Campaign Committee.

A company that matches individuals with clinical trials in Australia and New Zealand exposed personal information on over 37,000 people via a misconfigured MongoDB.

Thousands of files including medical, business, and legal data were exposed via a misconfigured AWS S3 storage bucket.

Backups ensure data continuity, but they're also a surface of risk. See how Fortune 100 vendor Attunity exposed nearly a terabyte of internal backups.

The UpGuard data breach research team discovered and secured leaks from IT services provider HCL, including new employee passwords.

Third-party Facebook apps gather Facebook data about the people who use them. While Facebook struggles to contain these exposures, insecure third-party data practices & misconfigured cloud systems continue to leak Facebook data to the internet. See how UpGuard discovered and secured two such cases.