2019 Compass — cloud storage exposure of application database backup (researcher disclosure)
Data compromised
Engineering/test dataset with extensive realtor and operational contacts (per reporting)
Technical writeup
Independent researcher coverage described a public AWS S3 bucket exposing a MongoDB backup related to a Compass engineering environment with extensive contact fields; Compass attributed exposure to a misconfigured test resource in press follow-ups.
Root cause
Misconfigured public cloud object exposing database backup