An unprotected Elasticsearch database left the account details of 7.5 million Adobe Creative Cloud customers exposed to anyone with a Web browser. The open database, since closed, could have provided information such as names, email addresses, and Creative Cloud applications used to any curious individual.
Comparitech, with security researcher Bob Diachenko, discovered the database on Oct. 19. Diachenko, who estimated the database had been open for approximately one week, notified Adobe that same day, which is also when the company secured the database.
While no payment information was compromised, the information in the database could be used for phishing attacks against customers.
Read more here.
This free, all-day online conference offers a look at the latest tools, strategies, and best practices for protecting your organization’s most sensitive data. Click for more information and, to register, here.