Breaches and incidents
Vibetech (India): unsecured database of 13.7 million aggregated breach records exposed
Researcher Jeremiah Fowler found an unprotected database of 13.7 million records with names, phone numbers, emails, plaintext passwords and bank details...
- Disclosed
- Verification
- Confirmed by two or more outlets
What happened
- Researcher Jeremiah Fowler found an unprotected database of 13.7 million records with names, phone numbers, emails, plaintext passwords and bank details, labelled with sources such as an “AT&T Data Leak” (7.9 million records) and “FBI Employee Directory” (Hackread).
- Root cause: database “accessible online without security authentication or a password” (Hackread); Fowler linked its IP to a data intelligence platform Vibetech operated or developed, but Vibetech has not been reported as confirming ownership (Daily Security Review).
- No attacker named; the data appears compiled from earlier breaches.
- Access was restricted shortly after Fowler’s disclosure notice to the company and hosting provider; the report was published on 13 Oct via ExpressVPN.