At least one app was dedicated to people with STIs, such as herpes.
Based on our research, the apps share a common developer.
But rare are these times.
Some affected parties deny the facts, disregarding our research, or playing down its impact.
So, we need to be thorough andmake sure everything we find is correct and accurate.
We initially only reached out to one - 3somes - to present our findings.
3somes quickly replied, asking for additional details about the breach.
The following images were taken from S3 buckets belonging to various apps on the AWS account.
They have been edited to maintain users' privacy.
Any exposed PII data creates much more significant risks to users.
In doing so, they could destroy many people’s relationships and personal and professional lives.
Amazon provides detailed instructions to AWS users to help them secure S3 buckets and keep them private.
To learn about data vulnerabilities in general, read ourcomplete guide to online privacy.
Each identified weakness is then thoroughly inspected for any instances of data exposure.
Our team was able to access this bucket because it was completely unsecured and unencrypted.
Whenever we find a data breach,we use expert techniques to verify the owner of the database.
As ethical hackers,were obliged to inform a company when we discover flaws in their online security.
The purpose of this web mapping project is to helpmake the internet safer for all users.
Wenever sell, store, or expose any informationwe encounter during our security research.
Our ethical security research team has discovered and disclosed some of the most impactful data leaks in recent years.
[Publication date: 15th June 2020]
yo, comment on how to improve this article.
