2017 — Deep Root Analytics: Deep Root Analytics (RNC contractor) left 1, 198.0M records
Technical writeup
Jun 2017. Deep Root Analytics (RNC contractor) left 1.1TB of voter data on a publicly accessible AWS S3 server for 12 days. Exposed: names, DOB, addresses, phones, voter registration, party affiliation, religious info, TV habits, Reddit scrapes. Chris Vickery of UpGuard discovered it. Firm took full responsibility.
Root cause
Misconfigured AWS S3; no authentication.