2021 Database leak — 1.1B records exposed
Data compromised
Passwords, Session tokens, Search history
Technical writeup
204GB database exposed online without password protection. Customer search history for medications and COVID-19 vaccines, metadata, visitor IDs, session IDs. Hosted by third-party vendor.
Root cause
Unprotected database; third-party vendor hosting.