ClaimPix Data Leak Exposes 5 Million Customer Records - DataBreaches.Net

"Cybersecurity Researcher Jeremiah Fowler discovered and reported to Website Planet about an unencrypted and non-password-protected database that contained 5.1 million files totaling 10 TB. These included powers of attorney, vehicle registrations, estimates, repair invoices, and images of damaged vehicles with visible license plates and VIN numbers. The publicly exposed database was not password-protected or encrypted. It contained 5,170,256 files and images."

"In a limited sampling of the exposed files, I saw insurance documents that contained names, physical addresses, phone numbers, and emails. I also saw registration documents that contained PII and additional details about the vehicle (including VIN number, year, make, model, and more). The database also contained just under 16,000 powers of attorney documents, which bestow the named grantee the legal authority to purchase, transfer, and assign title for the specific motor vehicle on behalf of the owner."

"These documents were signed electronically and included the IP addresses of the individuals who signed them. Additionally, the database contained internal documents, such as software license agreements, indicating the terms, fees, and other information that should not be publicly exposed."

An unprotected database held over 5.1 million files (about 10 TB) including insurance records, vehicle registrations, repair invoices, estimates, and images of damaged vehicles showing license plates and VINs. A sampling revealed names, physical addresses, phone numbers, emails, and detailed vehicle information. The repository included nearly 16,000 powers of attorney that grant legal authority over vehicle title transactions and contained electronic signatures with recorded IP addresses. The database also stored internal materials such as software license agreements, exposing terms and fees. The exposed data creates significant risk for identity theft, title fraud, and targeted phishing or social engineering attacks.

Read at DataBreaches.Net