Peekaboo Moments 100GB ElasticSearch Breach
by geshem - January 15, 2020 at 04:36 PM
#1
https://www.infosecurity-magazine.com/ne...ta-breach/

Besides for the PII leaked, the Peekaboo Moments Facebook API keys were leaked as well. This gives you access to the parents FB content. This is a great example of why not to use social network SSO functionality, there's no easy way to force a single sign off across all 3rd party apps.
#2
Well, totally agree with you! It`s not the 1st "social" breach and not the last this 2020 year
#3
Something to do with Facebook? Not surprised.
#4
Oh thx for sharing. Had heard of leak but not that its 3rd party app. Make more sense this way.
#5
I stopped being surprised after...

Quote:"Everything about the server, the company's website and the iOS/Android app was both bizarrely done and grossly insecure."

Peekaboo Moments, which appears to be run by a company based in China...
#6
Very interesting. Thanks for posting.
#7
Article says it was mainly the photos and videos leaked. And from a basic misconfiguration. This is the worst kind of breach

Possibly Related Threads…
Thread Author Replies Views Last Post
Experian South Africa discloses data breach impacting 24 million customers micko05 17 1,804 September 28, 2020 at 07:59 PM
Last Post: benp
Morgan Stanley Data Breach micko05 4 1,841 August 03, 2020 at 05:28 AM
Last Post: plastic
Hackers breach E27, want "donation" to reveal vulnerabilities wsl64x 3 475 June 29, 2020 at 10:49 PM
Last Post: STARTEXMISLEAD

 Users browsing this thread: 1 Guest(s)