Saturday, September 7, 2024
HomeData Breach80 Million U.S Households Sensitive Personal Data Exposed Online From Unprotected Mystery...

80 Million U.S Households Sensitive Personal Data Exposed Online From Unprotected Mystery Database

Published on

An unknown mystery database exposed nearly 80 million U.S households data that impacting up to 65% of US households.

Security Researchers Noam Rotem and Ran Locar uncovered the 24 GB database which is hosted by a Microsoft cloud server.

The database contains highly sensitive data that belongs to U.S peoples who are living in each household with their full names, their marital status, income bracket, age, and more.

- Advertisement - EHA

This is not a first incident that related to the households data leak, two years back, a massive database that contains 123 Million American households sensitive personal information leaked online by California-based data analytics firm.

but this leak contains some of the depth information included peoples’ names, addresses, and income which is more valuable for cybercriminals if they reach this database.

households data

According to vpnmentor report, The database seems to itemize households rather than individuals. It includes:

  • Full addresses, including street addresses, cities, counties, states, and zip codes
  • Exact longitude and latitude
  • Full names, including first, last, and middle initial
  • Age
  • Date of birth

Apart from this, additionally the researches discovered coded references to title, gender, marital status, income, homeowner status, and dwelling type. 

The personal data that exposed by this data leak leads to the victims falling in various cyber attacks including Spam and phishing that brings sophisticated attack via malware and ransomware.

“This made us suspect that the database is owned by insurance, healthcare, or mortgage company. However, information one may expect to find in a database owned by brokers or banks is missing. For example, there are no policy or account numbers, social security numbers, or payment types.” VPNMentor said.

Microsoft statement said, “We have notified the owner of the database and are taking appropriate steps to help the customer remove the data until it can be properly secured,” but Microsoft declined to reveal the customer of this unprotected database.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity updates also you can take the Best Cybersecurity courses online to keep your self-updated.

Also Read:

Fashion Retailer FOREVER 21 confirms Payment Card details stolen in the Security Breach

Nissan Canada Data Breach May have Exposed more than 1 Million Customers Data

31 Million Data Leaked Online Reveal that keyboard App Collects Everything from Contacts to Keystrokes

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

BBTok Abuses Legitimate Windows Utility Command Tool to Stay Undetected

Cybercriminals in Latin America have increased their use of phishing scams targeting business transactions...

Predator Spyware Exploiting “one-click” & “zero-click” Flaws

Recent research indicates that the Predator spyware, once thought to be inactive due to...

Tropic Trooper Attacks Government Organizations to Steal Sensitive Data

Tropic Trooper (aka KeyBoy, Pirate Panda, and APT23) is a sophisticated cyberespionage APT group,...

NoiseAttack is a Novel Backdoor That Uses Power Spectral Density For Evasion

NoiseAttack is a new method of secretly attacking deep learning models. It uses triggers...

Free Webinar

Decoding Compliance | What CISOs Need to Know

Non-compliance can result in substantial financial penalties, with average fines reaching up to $4.5 million for GDPR breaches alone.

Join us for an insightful panel discussion with Chandan Pani, CISO - LTIMindtree and Ashish Tandon, Founder & CEO – Indusface, as we explore the multifaceted role of compliance in securing modern enterprises.

Discussion points

The Role of Compliance
The Alphabet Soup of Compliance
Compliance
SaaS and Compliance
Indusface's Approach to Compliance

More like this

Verkada Pay $2.95 Million Failed To Secure Data Lead To Massive Breach

The FTC has ordered Verkada to implement a comprehensive information security program to address...

New ManticoraLoader – Malware Attacking Citrix Users To Steal Data

Cyble Research & Intelligence Labs has recently found information about a new type of...

TDECU MOVEit Data Breach, 500,000+ members’ Personal Data Exposed

Texas Dow Employees Credit Union (TDECU) has disclosed that the personal information of over...