2019 — Verifications.io: Bob Diachenko discovered an unprotected,…
Data compromised
Emails, names, genders, IPs, phones, DOB, employers, addresses
Technical writeup
Feb 2019. Bob Diachenko discovered an unprotected, password-less MongoDB database (~150GB). Exposed: emails, names, genders, IPs, phones, DOB, employers, job titles, locations, addresses. No passwords or credit cards. Later analysis suggested 2B+ records across four databases. Have I Been Pwned called it second-largest breach ever. Verifications.io took website offline Mar 4, 2019.
Root cause
Unprotected MongoDB database; no authentication.