2024 Brillen.de — 3.5M customers, unsecured Elasticsearch
Data compromised
Names, addresses, emails, phones, DOB, order data
Technical writeup
Unsecured Elasticsearch (Supervista). 2.46M DE, 961K ES, 90K AT. Names, addresses, emails, phones, DOB, orders. Employee forgot to remove AWS rule after testing.
Root cause
Misconfiguration; unsecured Elasticsearch