← Walmart

MBM (Limoges Jewelry) exposes 1.3M customers — S3 bucket

2018 1.3M records affected Share on X

Data compromised

Email addresses, Passwords, Passwords (plain text), Names, Addresses, Phone numbers

Technical writeup

MBM Company left Amazon S3 bucket public; 1.3M Walmart (and other retailers) customer records exposed—names, addresses, phones, emails, plaintext passwords. Records from 2000 to early 2018.

Root cause

Partner misconfiguration; public S3 bucket.

References