2015 iFit — 576K health data in unsecured MongoDB
Data compromised
Names, passwords, DOB, weights, heart rate, credit cards, addresses
Technical writeup
Researcher Chris Vickery found unsecured MongoDB via Shodan. Exposed: names, passwords, DOB, weights, heart rate, credit cards, addresses. Company claimed "old test database."
Root cause
Unsecured database; misconfiguration