PeopleGrove security lapse exposed users’ personal information
Reading Time: 2 minutesPeopleGrove confirmed Thursday that it’s investigating after a security lapse exposed users’ personal information online.
The company, formerly CampusKudos, which provides and hosts a social platform for higher education institutions and alumni networks, left the server hosting an internal database exposed to the internet without a password, allowing anyone to access the data using only a web browser and knowing its IP address.
The database contained gigabytes of personal information, including email addresses, phone numbers, addresses, details of university achievements and scores, and resumes containing detailed work histories and employment details. The records also contained links to the user’s profile photo.
None of the exposed data was encrypted.
‘The database identified is a database for our development servers,’ said PeopleGrove chief technology officer Reilly Davis, when reached by email. ‘I do know that most of the data in those databases is non-production test data, so we are investigating exactly what data is contained in there, and how any production data was included.’
Davis said an investigation was underway but did not say why the internal database became accessible from the internet. It’s also unclear why the apparent test database contained real people’s information.
At the time it was discovered, the database had more than 25 million logs. PeopleGrove’s website says it has more than 20 million users.
PeopleGrove CTO Davis said the company would notify users who ‘if we do find their sensitive data was exposed.’ Davis said the company has logging in place within its Google Cloud environment to determine what data may have been accessed or exfiltrated.
PeopleGrove chief executive Adam Saven, who was copied on the email, did not comment.
Reference: https://techcrunch.com/2023/03/10/peoplegrove-users-data-exposed/
Ref: techcrunch
MediaDownloader.net -> Free Online Video Downloader, Download Any Video From YouTube, VK, Vimeo, Twitter, Twitch, Tumblr, Tiktok, Telegram, TED, Streamable, Soundcloud, Snapchat, Share, Rumble, Reddit, PuhuTV, Pinterest, Periscope, Ok.ru, MxTakatak, Mixcloud, Mashable, LinkedIn, Likee, Kwai, Izlesene, Instagram, Imgur, IMDB, Ifunny, Gaana, Flickr, Febspot, Facebook, ESPN, Douyin, Dailymotion, Buzzfeed, BluTV, Blogger, Bitchute, Bilibili, Bandcamp, Akıllı, 9GAG