2024 Mars Hydro — Unprotected IoT database, 2.7B records
Data compromised
Wi-Fi credentials; IP addresses; device IDs; API tokens; error logs
Technical writeup
China-based IoT grow light company. Unprotected database (1.17 TB) exposed 2.7B records. Discovered by Jeremiah Fowler. Exposed: Wi-Fi network names/passwords, IP addresses, device IDs, error logs with OS details, API tokens, app versions. Mars Pro app users. Access restricted after disclosure; exposure duration unknown.
Root cause
Misconfigured database; no access controls