ALERT Ouch! Broadvoice Leaks 350 million Customer Records

[KNERD]

VoIP Firm Broadvoice Leaks 350 Million Customer Records

Elasticsearch misconfiguration to blame

www.infosecurity-magazine.com

 

[krzykat]

Yeah read that, and many audio recordings !!!

 

[bennun]

"Broadvoice left an Elasticsearch database cluster containing such information open to the internet, accessible to anyone, with no authentication required " - Wow, how could they miss that.

 

[pbxinaflash]

"Broadvoice left an Elasticsearch database cluster containing such information open to the internet, accessible to anyone, with no authentication required " - Wow, how could they miss that.

It is actually more common than you might think...!

 

[big charlie]

Some ninja from the Shodan school.

Anyone have experience with securityscorecard.com for vetting vendors? They had an ad on the Security Now podcast. It looks interesting but I'm not sure how large their database is