170k pilfered, not sure who may have been responsible or who was pilfered

I finally read an article that was sent to me back in June I promised I’d cover.

While it was not clear in the article what types of information were covered, we need to know what’s going on.

We covered this in passing on podcast 243, and the responses there were not surprising.

I told James that when I saw the first occurrance of this, I thought it was a one time thing, but now we’re seeing more. He indicated that it could be clear neglegance on the developer, but I’m not going to say one way or another.

Here’s the original email we read on air at that time.

<

blockquote> Hi Jared,

I hope you’re doing well.

Recently, cybersecurity researcher Jeremiah Fowler discovered and reported to WebsitePlanet a non-password-protected database, presumably belonging to a real estate investment and management company, containing 170,360 records with a total size of 116.24 GB.

What happened:
The database was left unsecured without encryption or password protection. A sample review revealed hotel employees’ PII, including names, physical addresses, email addresses, DOB, SSN and more.

Why it matters:
This type of data exposure significantly increases the risk of identity theft, tax or credit fraud, unauthorized access to personal financial accounts and more.

Read our full report here: https://www.websiteplanet.com/news/ incomeproperty-breach-report/ <https://www.websiteplanet.com/news/ incomeproperty-breach-report/

Feel free to reach out if you have any questions.

Best,
James
Research Team

Over 170k Records, Including PII Exposed in Real Estate Investment and Management Data Breach i the article he linked to.

James is a reader of the blog, and thanks for passing this long. Sorry it took so long for me to get to this.