More than 2,000 mobile applications with millions of downloads were leaking user data, InfoSecurity reports. The leak was attributed to a misconfiguration of backend Firebase cloud databases, per a study conducted by security vendor Check Point. Two of the apps included a South American e-commerce app with more than 10 million downloads that leaked API gateway credentials and API keys, and a logo design app, also with over 10 million downloads, that leaked 130,000 usernames, emails and passwords.
17 March 2022
Misconfigured cloud databases responsible for data leak from popular apps
Related stories
CPPA executive director offers window into agency's priorities
New state laws protect abuse survivors from misuse of vehicle connectivity
How a recent settlement represents a warning and relief for the adtech industry
Notes from the IAPP Canada: Privacy watchdogs — What the 2024–25 annual reports reveal
A view from DC: Competing Republican visions for tech policy in the 119th Congress