← MongoDB

2019 MongoDB — 275M records, unsecured databases

2019 275.0M records affected Share on X

Data compromised

Various PII depending on database; names, emails, phone numbers

Technical writeup

Multiple unsecured MongoDB databases exposed approximately 275 million records in 2019. The databases had no authentication, allowing anyone to access and download the data. This was part of a broader trend of misconfigured NoSQL databases being left exposed.

Root cause

Unsecured database; no authentication; poor security

References