Led by Noam Rotem,vpnMentorsresearch team discovereda data breach belonging to popular Indian parenting and e-commerce brand BabyChakra.
This data breach represents a massive lapse in security by the company.
But rare are these times.
Most often, we need days of investigation before we understand whats at stake or whos exposing the data.
The bucket was found secured by the 26th April 2021.
The photos contained incredibly sensitive subjects: children, families, medical test results, and medical prescriptions.
Instead, BabyChakra stored everyones photos together and left them publicly accessible online.
Predatory Activity
BabyChakras cloud account contained millions of photos, including many of young children.
Unfortunately, this could also attract online predators interested in collecting such photos for personal use.
Amazon provides detailed instructions to AWS users to help them secure S3 buckets and keep them private.
To learn about data vulnerabilities in general,read ourcomplete guide to online privacy.
They then examine each data store for any data being leaked.
Our team was able to access this S3 bucket because it was completely unsecured and unencrypted.
These ethics also mean we carry a responsibility to the public.
BabyChakra users must be aware of a data breach that exposes so much of their sensitive data.
The purpose of this web mapping project is to help make the internet safer for all users.
We never sell, store, or expose any information we encounter during our security research.
Our ethical security research team has discovered and disclosed some of the most impactful data breaches in recent years.
This has included an enormous data breachexposing health data from millions of Indian COVID-19 patients.
We also revealed that a popular Shopify app wasleaking private data belonging to 10,000s of online shoppers worldwide.
You may also want to read ourVPN Leak Report and Data Privacy Stats Report.
Help Us Protect The Internet!
Check the Leak Box here »
like, comment on how to improve this article.
