An AWS-hosted database was configured with no username or password required for access to personal data.
How many Instagram influencers does it take to create a massive unplanned data release? At least 49 million, if the contents of a publicly exposed database are any indication.
In the latest data incident involving an AWS-hosted database misconfiguration, a database containing contact information for millions of Instagram influencers was found by researcher Anurag Sen, who discovered that the information required no username or password for access.
A TechCrunch reporter traced the database to Chtrbox, a Mumbai-based firm that pays Instagram users to post sponsored information. According to Instagram, scraping the service for the phone, email, mailing address, and other information contained in the database is against the platform's terms of service. The company says it is in conversation with Chtrbox to determine how the information was gathered.
After being contacted by the reporter, the database was taken offline; Chtrbox has not commented on the database, its contents, or the incident.
About the Author(s)
You May Also Like
The fuel in the new AI race: Data
April 23, 2024Securing Code in the Age of AI
April 24, 2024Beyond Spam Filters and Firewalls: Preventing Business Email Compromises in the Modern Enterprise
April 30, 2024Key Findings from the State of AppSec Report 2024
May 7, 2024Is AI Identifying Threats to Your Network?
May 14, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024