Researcher finds massive breach archive online

Security researcher Jeremiah Fowler discovered a database containing thirteen point seven million records from past data breaches sitting openly on the internet.

Archive held passwords and banking details

The exposed database included names, phone numbers, email addresses, passwords, bank account details and more from individuals across multiple countries.

Data came from major company breaches

Almost eight million records came from an AT and T data leak. Other sources included Amazon with one point two million records, Walmart with four hundred twenty thousand, and PayPal with eighteen thousand.

Archive included government agency data

The database also contained smaller leaks from the FBI Employee Directory with four thousand eighty four records and Interpol with nine hundred twenty nine records.

Vibetech collected breach data deliberately

Fowler discovered the database was connected to Vibetech, an Indian software development platform. He speculates the company was collecting datasets from previous breaches and inadvertently made them publicly accessible.

Breach data collection raises legal questions

Fowler notes a growing number of organizations intentionally collect and sell breached credential datasets for research or threat intelligence. He argues they operate in a legally and ethically complex environment.

“Although these datasets can provide valuable insights into attack trends, credential reuse, and emerging threats, organizations that collect compromised personal information operate in a legally and ethically complex environment.”

Unprotected databases remain a widespread problem

Unprotected databases are a leading cause of data leaks. In early twenty twenty four, researchers discovered an archive with personal information on approximately two hundred twenty three million Brazilians.

Database was secured after disclosure

Fowler notified Vibetech and the hosting provider. The database was restricted and made no longer publicly accessible soon after. A day later the IP address displayed an Information Security Management System compliance platform dashboard.

Exposed individuals should change passwords

Individuals who think their information may have been exposed in any of these breaches should change their passwords immediately and be careful with incoming email messages.