Tuesday, May 13, 2025
HomeData Breach80 Million U.S Households Sensitive Personal Data Exposed Online From Unprotected Mystery...

80 Million U.S Households Sensitive Personal Data Exposed Online From Unprotected Mystery Database

Published on

SIEM as a Service

Follow Us on Google News

An unknown mystery database exposed nearly 80 million U.S households data that impacting up to 65% of US households.

Security Researchers Noam Rotem and Ran Locar uncovered the 24 GB database which is hosted by a Microsoft cloud server.

The database contains highly sensitive data that belongs to U.S peoples who are living in each household with their full names, their marital status, income bracket, age, and more.

- Advertisement - Google News

This is not a first incident that related to the households data leak, two years back, a massive database that contains 123 Million American households sensitive personal information leaked online by California-based data analytics firm.

but this leak contains some of the depth information included peoples’ names, addresses, and income which is more valuable for cybercriminals if they reach this database.

households data

According to vpnmentor report, The database seems to itemize households rather than individuals. It includes:

  • Full addresses, including street addresses, cities, counties, states, and zip codes
  • Exact longitude and latitude
  • Full names, including first, last, and middle initial
  • Age
  • Date of birth

Apart from this, additionally the researches discovered coded references to title, gender, marital status, income, homeowner status, and dwelling type. 

The personal data that exposed by this data leak leads to the victims falling in various cyber attacks including Spam and phishing that brings sophisticated attack via malware and ransomware.

“This made us suspect that the database is owned by insurance, healthcare, or mortgage company. However, information one may expect to find in a database owned by brokers or banks is missing. For example, there are no policy or account numbers, social security numbers, or payment types.” VPNMentor said.

Microsoft statement said, “We have notified the owner of the database and are taking appropriate steps to help the customer remove the data until it can be properly secured,” but Microsoft declined to reveal the customer of this unprotected database.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity updates also you can take the Best Cybersecurity courses online to keep your self-updated.

Also Read:

Fashion Retailer FOREVER 21 confirms Payment Card details stolen in the Security Breach

Nissan Canada Data Breach May have Exposed more than 1 Million Customers Data

31 Million Data Leaked Online Reveal that keyboard App Collects Everything from Contacts to Keystrokes

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Microsoft Patch Tuesday May 2025 Released With the Fixes for 72 Flaws With 5 Actively Exploited 0-Day

Microsoft has released its May 2025 Patch Tuesday updates, addressing 72 security vulnerabilities across...

Ivanti Released Security Updates to Fix for the Mutiple RCE Vulnerabilities – Patch Now

Ivanti, a leading enterprise software provider, has released critical security updates addressing vulnerabilities across...

Fortinet FortiVoice Zero-day Vulnerability Actively Exploited in The Wild

A critical stack-based buffer overflow vulnerability (CWE-121) has been discovered in multiple Fortinet products,...

Ransomware Attacks Surge by 123% Amid Evolving Tactics and Strategies

The 2025 Third-Party Breach Report from Black Kite highlights a staggering 123% surge in...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

Marks & Spencer Confirms Customer Data Breach in Recent Cyber Attack

British retail giant Marks & Spencer has officially confirmed that customer personal data was...

Repeated Firmware Key-Management Failures Undermine Intel Boot Guard and UEFI Secure Boot

The security of fundamental technologies like Intel Boot Guard and UEFI Secure Boot has...

Cyberattackers Targeting IT Help Desks for Initial Breach

Cybercriminals are increasingly impersonating IT support personnel and trusted authorities to manipulate victims into...