Data Breaches

A misconfigured Amazon S3 storage bucket leaked data from iPR Software, exposing tens of thousands of user accounts and client documents.

ISPs do more than provide internet service for individual customers-- they can also act as part of US critical infrastructure. See how one ISP exposed their administrative and root passwords to the public.

A storage device containing 1.7 terabytes of information detailing telecommunications installations throughout the Russian Federation was exposed to the public internet.

An AWS S3 bucket configured for public access contained a file from 2010 with six million email addresses, apparently from the Democratic Senatorial Campaign Committee.

A company that matches individuals with clinical trials in Australia and New Zealand exposed personal information on over 37,000 people via a misconfigured MongoDB.

Thousands of files including medical, business, and legal data were exposed via a misconfigured AWS S3 storage bucket.

Backups ensure data continuity, but they're also a surface of risk. See how Fortune 100 vendor Attunity exposed nearly a terabyte of internal backups.

The UpGuard data breach research team discovered and secured leaks from IT services provider HCL, including new employee passwords.

Third-party Facebook apps gather Facebook data about the people who use them. While Facebook struggles to contain these exposures, insecure third-party data practices & misconfigured cloud systems continue to leak Facebook data to the internet. See how UpGuard discovered and secured two such cases.

Based on UpGuard's data breach research, the UK Parliament’s DCMS Committee prepared and published the final report detailing their 18 month investigation into online disinformation and the privacy practices of platforms such as Facebook. Read about the report, and the AggregateIQ breach discovery.

A storage server configured for public access exposed millions of files belonging to the Oklahoma Securities Commission.

UpGuard discovered and helped secure an Australian company's code repository containing SQL backups of employee information, banking data, and more.