← Buchbinder

2020 Buchbinder — 3.1M customers, 10TB unsecured MSSQL

2020 3.1M records affected Share on X

Data compromised

Names, emails, phones, addresses, DOB, driver's licenses, bank details, invoices

Technical writeup

Unsecured MSSQL backup (~10TB) on internet. Data from 2003. Names, emails, phones, addresses, DOB, driver's licenses, bank details, invoices. 3K employee passwords in plaintext. BSI president among affected.

Root cause

Unsecured database; misconfiguration

References