Nearly 1M records related to personal property were exposed

Research conducted by Jeremiah Fowler uncovered 14 non-password-protected databases linked to Lost and Found Software, a property tracking organization. Of these, 10 were publicly accessible, containing 820,750 records, including sensitive information such as personal identification and payment confirmations. The exposure raises serious concerns regarding the potential for identity theft, phishing attacks, and fraudulent activities. It remains unclear whether the databases were managed internally or by a third party. The organization quickly restricted access to the databases once alerted about the issue, indicating the urgency of addressing such data breaches.

14 databases associated with Lost and Found Software were found exposed, with 10 publicly accessible, containing 820,750 records including sensitive personal and payment-related information.

The databases contained high-resolution images of identification documents and personal items, posing significant risks of identity theft and fraudulent activities.

The exposure raises concerns about the management responsibilities of Lost and Found Software and whether their databases were handled in-house or by a third party.

Immediate action was taken to restrict access to the databases upon notification, highlighting the precarious nature of data management practices within such organizations.

Read at Securitymagazine