8Belts is a popular language-learning platform used around the world to teach various languages.
The company offers Spanish speakers onlinelanguage courses in English, German, French, and Chinese.
8Belts guaranteesstudents can learn any of the four languages within eight months and boasts a 100% achievement rate.
It uses modern technology like algorithms and language mapping to innovate language learning and attain such high goals.
But rare are these times.
Most often, we need days of investigation before we understand whats at stake or whos leaking the data.
Some affected parties deny the facts, disregarding our research, or playing down its impact.
So, we need to be thorough andmake sure everything we find is correct and accurate.
It appears8Belts had misconfigured its user permissions, exposing all data on the S3 bucket.
The earliest records stated from 2017 and included long lists of 8Belt user details.
Data Breach Impact
This data breach representsa significant lapse in 8Belts security protocols.
By not doing so,8Belts jeopardized the security not just of its users, but also the company itself.
Phishing campaigns are one of the most popular forms of attack against private companies by criminal hackers.
The impact of a successful phishing campaign on a company and its employees can be devastating.
As 8Belts is based in Spain, the company falls within thejurisdiction of the EUs GDPR.
The impact of such an attack would be immeasurable, and could happen at any time.
Amazon provides detailed instructions to AWS users to help them secure S3 buckets and keep them private.
To learn about data vulnerabilities in general,read ourcomplete guide to online privacy.
Every identified weak spot is then thoroughly inspected for any signs of exposed data.
Our team was able to access this S3 bucket because it was completely unsecured and unencrypted.
As ethical hackers,were obliged to inform a companywhen we discover flaws in their online security.
The purpose of this web mapping project is to helpmake the internet safer for all users.
Wenever sell, store, or expose any informationwe encounter during our security research.
Our ethical security research team has discovered and disclosed some of the most impactful data leaks in recent years.
[Publication date: 01.06.2020]
yo, comment on how to improve this article.
