Monday, January 13, 2025
HomeData Breach80 Million U.S Households Sensitive Personal Data Exposed Online From Unprotected Mystery...

80 Million U.S Households Sensitive Personal Data Exposed Online From Unprotected Mystery Database

Published on

An unknown mystery database exposed nearly 80 million U.S households data that impacting up to 65% of US households.

Security Researchers Noam Rotem and Ran Locar uncovered the 24 GB database which is hosted by a Microsoft cloud server.

The database contains highly sensitive data that belongs to U.S peoples who are living in each household with their full names, their marital status, income bracket, age, and more.

This is not a first incident that related to the households data leak, two years back, a massive database that contains 123 Million American households sensitive personal information leaked online by California-based data analytics firm.

but this leak contains some of the depth information included peoples’ names, addresses, and income which is more valuable for cybercriminals if they reach this database.

households data

According to vpnmentor report, The database seems to itemize households rather than individuals. It includes:

  • Full addresses, including street addresses, cities, counties, states, and zip codes
  • Exact longitude and latitude
  • Full names, including first, last, and middle initial
  • Age
  • Date of birth

Apart from this, additionally the researches discovered coded references to title, gender, marital status, income, homeowner status, and dwelling type. 

The personal data that exposed by this data leak leads to the victims falling in various cyber attacks including Spam and phishing that brings sophisticated attack via malware and ransomware.

“This made us suspect that the database is owned by insurance, healthcare, or mortgage company. However, information one may expect to find in a database owned by brokers or banks is missing. For example, there are no policy or account numbers, social security numbers, or payment types.” VPNMentor said.

Microsoft statement said, “We have notified the owner of the database and are taking appropriate steps to help the customer remove the data until it can be properly secured,” but Microsoft declined to reveal the customer of this unprotected database.

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity updates also you can take the Best Cybersecurity courses online to keep your self-updated.

Also Read:

Fashion Retailer FOREVER 21 confirms Payment Card details stolen in the Security Breach

Nissan Canada Data Breach May have Exposed more than 1 Million Customers Data

31 Million Data Leaked Online Reveal that keyboard App Collects Everything from Contacts to Keystrokes

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Critical macOS Vulnerability Lets Hackers to Bypass Apple’s System Integrity Protection

Microsoft Threat Intelligence has uncovered a critical macOS vulnerability that allowed attackers to bypass...

CISA Released A Free Guide to Enhance OT Product Security

To address rising cyber threats targeting critical infrastructure, the U.S. Cybersecurity and Infrastructure Security...

Microsoft Warns of MFA Issue Affecting Microsoft 365 users

Microsoft has issued a warning regarding an ongoing issue with Multi-Factor Authentication (MFA) that...

RedCurl APT Deploys Malware via Windows Scheduled Tasks Exploitation

Researchers identified RedCurl APT group activity in Canada in late 2024, where the attackers...

API Security Webinar

72 Hours to Audit-Ready API Security

APIs present a unique challenge in this landscape, as risk assessment and mitigation are often hindered by incomplete API inventories and insufficient documentation.

Join Vivek Gopalan, VP of Products at Indusface, in this insightful webinar as he unveils a practical framework for discovering, assessing, and addressing open API vulnerabilities within just 72 hours.

Discussion points

API Discovery: Techniques to identify and map your public APIs comprehensively.
Vulnerability Scanning: Best practices for API vulnerability analysis and penetration testing.
Clean Reporting: Steps to generate a clean, audit-ready vulnerability report within 72 hours.

More like this

Furry Hacker Breaches Scholastic – Exposes Data of 8 Million People

The education and publishing giant Scholastic has fallen victim to a significant data breach...

PowerSchool Hacked – Attackers Accessed Personal Data of Students and Teachers

Walker County Schools has reported that unauthorized access to personal data belonging to students...

United Nations Aviation Agency Hacked Recruitment Data Exposed

The International Civil Aviation Organization (ICAO), a United Nations agency responsible for coordinating global...