Dubai Taxi Company — open MongoDB, 220K users
Data compromised
Emails, phones, driver licenses, work permits, location
Technical writeup
DTC app exposed open MongoDB. 197K+ app users, 23K drivers. Emails, phones, tokens, driver licenses, work permits, nationality, location (2018–2021). 44% of Dubai taxi market.
Root cause
Misconfigured database; no authentication