2017 CloudPets — 820K users (connected toys)
Data compromised
Email addresses, passwords, dates of birth, 2.2M voice recordings
Technical writeup
Internet-connected stuffed toys had exposed MongoDB indexed by Shodan. Attackers left ransom demands. Voice messages exposed on AWS.
Root cause
Misconfigured MongoDB database