A freelance programmer discovered an unsecured server belonging to fitness app PumpUp, Global News reports. Oliver Hough found the server while conducting a scan for MQTT servers. The information found on the server included credit card data, personal message and Facebook accounts. An investigation found the data was not protected by any passwords. “Beyond the security researcher who originally came across the vulnerability, we are not aware of any other individuals who were aware of this situation or who had access to any of the data,” CEO Garrett Gottlieb wrote in a statement.
Full Story