Saturday, January 25, 2025
HomeSecurity NewsCalifornia Voter Database Leaked - 19 Million Voters Records Under Risk

California Voter Database Leaked – 19 Million Voters Records Under Risk

Published on

SIEM as a Service

Follow Us on Google News

A newly discovered an unprotected MongoDB database contains a large volume of data which belongs to California state voters information that Contains Every Registered Voter Data same as many of voter database leaked incidents have been reported in last year.

Leaked Database publicly available in online that can be accessed by anyone without any password or log in and this incident received by a Shodan-based breach report.Also, it was open to view, edit and modifying the entire database by anyone.

Data volume contains 95.1GB that was leaked in public on Jan 19th. Later Database has gone offline but we can access the related documents through offline.

The Sacramento Bee digital media department are holding these sample in the database and other attributes that pointed to their own internal system.

A leaked Database contains an information about, Legislation data (bills, committees, voting results etc.), Letters to editor, readers’ opinions, restaurant reviews and info, the SacBee internal systems info (URLs, internal keys, user agents info, admin credentials etc), Data visualization info ,the SacBee API info (incl. subscribers and clients info), State pay info.

In this database contains all the registered votor’s data for the entire state of California  19,501,258 records.

Voter Database Leaked
Voter Database Leaked

Same attack has been discovered in 2017 with same set of confidentials data but past attack was targetted for ransomware attack and this attack aslo for the same motivation by hackers.

According to Kromtech Security ,The database has been labeled as ‘compromised’ shortly after it become publicly available and now not accessible but according to Shodan report it contained a “Warning” and ‘Readme’ note-  which is usually a ransomware note.
Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Subaru’s STARLINK Connected Car’s Vulnerability Let Attackers Gain Restricted Access

In a groundbreaking discovery on November 20, 2024, cybersecurity researchers Shubham Shah and a...

Android Kiosk Tablets Vulnerability Let Attackers Control AC & Lights

A security flaw found in Android-based kiosk tablets at luxury hotels has exposed a...

CISA Releases Six ICS Advisories Details Security Issues

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued six Industrial Control Systems (ICS)...

Juniper Routers Exploited via Magic Packet Vulnerability to Deploy Custom Backdoor

A sophisticated cyber campaign dubbed "J-magic" has been discovered targeting enterprise-grade Juniper routers with...

API Security Webinar

Free Webinar - DevSecOps Hacks

By embedding security into your CI/CD workflows, you can shift left, streamline your DevSecOps processes, and release secure applications faster—all while saving time and resources.

In this webinar, join Phani Deepak Akella ( VP of Marketing ) and Karthik Krishnamoorthy (CTO), Indusface as they explores best practices for integrating application security into your CI/CD workflows using tools like Jenkins and Jira.

Discussion points

Automate security scans as part of the CI/CD pipeline.
Get real-time, actionable insights into vulnerabilities.
Prioritize and track fixes directly in Jira, enhancing collaboration.
Reduce risks and costs by addressing vulnerabilities pre-production.

More like this

LegionLoader Abusing Chrome Extensions To Deliver Infostealer Malware

LegionLoader, a C/C++ downloader malware, first seen in 2019, delivers payloads like malicious Chrome...

North Korean Hackers Stolen $2.2 Billion From Crypto Platforms In 2024

Cryptocurrency hacking incidents in 2024 surged 21.07% YoY to $2.2 billion, with 303 breaches...

Deloitte Denies Breach, Claims Only Single System Affected

Ransomware group Brain Cipher claimed to have breached Deloitte UK and threatened to publish...