Friday, April 4, 2025
HomeData Breach80 Million U.S Households Sensitive Personal Data Exposed Online From Unprotected Mystery...

80 Million U.S Households Sensitive Personal Data Exposed Online From Unprotected Mystery Database

Published on

SIEM as a Service

Follow Us on Google News

An unknown mystery database exposed nearly 80 million U.S households data that impacting up to 65% of US households.

Security Researchers Noam Rotem and Ran Locar uncovered the 24 GB database which is hosted by a Microsoft cloud server.

The database contains highly sensitive data that belongs to U.S peoples who are living in each household with their full names, their marital status, income bracket, age, and more.

This is not a first incident that related to the households data leak, two years back, a massive database that contains 123 Million American households sensitive personal information leaked online by California-based data analytics firm.

but this leak contains some of the depth information included peoples’ names, addresses, and income which is more valuable for cybercriminals if they reach this database.

households data

According to vpnmentor report, The database seems to itemize households rather than individuals. It includes:

  • Full addresses, including street addresses, cities, counties, states, and zip codes
  • Exact longitude and latitude
  • Full names, including first, last, and middle initial
  • Age
  • Date of birth

Apart from this, additionally the researches discovered coded references to title, gender, marital status, income, homeowner status, and dwelling type. 

The personal data that exposed by this data leak leads to the victims falling in various cyber attacks including Spam and phishing that brings sophisticated attack via malware and ransomware.

“This made us suspect that the database is owned by insurance, healthcare, or mortgage company. However, information one may expect to find in a database owned by brokers or banks is missing. For example, there are no policy or account numbers, social security numbers, or payment types.” VPNMentor said.

Microsoft statement said, “We have notified the owner of the database and are taking appropriate steps to help the customer remove the data until it can be properly secured,” but Microsoft declined to reveal the customer of this unprotected database.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity updates also you can take the Best Cybersecurity courses online to keep your self-updated.

Also Read:

Fashion Retailer FOREVER 21 confirms Payment Card details stolen in the Security Breach

Nissan Canada Data Breach May have Exposed more than 1 Million Customers Data

31 Million Data Leaked Online Reveal that keyboard App Collects Everything from Contacts to Keystrokes

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Ivanti Fully Patched Connect Secure RCE Vulnerability That Actively Exploited in the Wild

April 5, 2025 – Ivanti has issued an urgent security advisory for CVE-2025-22457, a...

Beware! Weaponized Job Recruitment Emails Spreading BeaverTail and Tropidoor Malware

A concerning malware campaign was disclosed by the AhnLab Security Intelligence Center (ASEC), revealing...

EncryptHub Ransomware Uncovered Through ChatGPT Use and OPSEC Failures

EncryptHub, a rapidly evolving cybercriminal entity, has come under intense scrutiny following revelations of...

PoisonSeed Targets CRM and Bulk Email Providers in New Supply Chain Phishing Attack

A sophisticated phishing campaign, dubbed "PoisonSeed," has been identified targeting customer relationship management (CRM)...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

State Bar of Texas Confirms Data Breach, Begins Notifying Affected Consumers

The State Bar of Texas has confirmed a data breach following the detection of...

Oracle Confirms The Data Breach- Starts Initiating Client Notifications

Oracle Corporation has confirmed a data breach involving its older Gen 1 servers, marking...

Australian Pension Funds Hacked: Members Face Financial Losses

Several of Australia’s largest superannuation funds have been targeted in a coordinated cyberattack, leading...