PeopleGrove security lapse exposed users’ personal information

PeopleGrove confirmed Thursday that it’s investigating after a security lapse exposed users’ personal information online.
The company, formerly CampusKudos, which provides and hosts a social platform for higher education institutions and alumni networks, left the server hosting an internal database exposed to the internet without a password, allowing anyone to access the data using only a web browser and knowing its IP address.
The database contained gigabytes of personal information, including email addresses, phone numbers, addresses, details of university achievements and scores

リンク元