Live data from Hacker News

Marketing Firm Exactis Leaked a Personal Info Database with 340M Records

wired.com

211–220 of 307 posts

Re: Marketing Firm Exactis Leaked a Personal Info Database with 340M Records

#211

It's interesting that we consider this a leak only when the marketing firm loses the data. If we lived in a just society we would consider it a leak once the marketing firm got the data.

more sad than interesting because we normally don't know when and which firm(s) got our data. I never heard of this company until today.

Re: Marketing Firm Exactis Leaked a Personal Info Database with 340M Records

#212

Earlier quoted context omitted.

> When will this stop? When's the last straw? When the top folks in the US government are personally affected. Until then, "congressional hearings" and presidential ambivalence is the most action we'll get out of them. Most people don't really understand what the significance of these events are.

> When the top folks in the US government are personally affected The OPM breach covered a lot of powerful senior people.

Indeed, however, the impact of such breaches has yet to be made explicit. It seems only a massive cyber attack would show the public what is possible with such information

Re: Marketing Firm Exactis Leaked a Personal Info Database with 340M Records

#213
From their privacy policy:

“In order to be in line with Fair Information Practices we will take the following responsive action, should a data breach occur: We will notify you via email • Within 7 business days We will notify the users via in-site notification • Within 7 business days We also agree to the Individual Redress Principle which requires that individuals have the right to legally pursue enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or government agencies to investigate and/or prosecute non-compliance by data processors.”

Re: Marketing Firm Exactis Leaked a Personal Info Database with 340M Records

#214

There is currently 904.8 TB of data available on Internet-exposed Elastic clusters. Here is an overview of where these servers are located: https://www.shodan.io/report/yhaN9gje

2.6MB per person on average? That's a lot of personal data...

Re: Marketing Firm Exactis Leaked a Personal Info Database with 340M Records

#215

It's interesting that we consider this a leak only when the marketing firm loses the data. If we lived in a just society we would consider it a leak once the marketing firm got the data.

It's a leak because there wasn't an invoice attached to what would otherwise be business as usual: the data being obtained by sketchy third parties.

Re: Marketing Firm Exactis Leaked a Personal Info Database with 340M Records

#216
post #174

More and more this just feels like the modern crisis of capitalism. The declining rate of profit is so extreme that we have to institute a corporate marketing panopticon designed to sell you shit you don't need, to the extent we're willing to risk that panopticon leaking dangerous information to non-state actors that could lead to theft, extortion, or worse. And we're not even beginning to think about what this can b…

>And we're not even beginning to think about what this can be used for by authoritarian regimes

"Big data" was crucial to the operational efficiency of the Holocaust

https://en.m.wikipedia.org/wiki/IBM_and_the_Holocaust

Re: Marketing Firm Exactis Leaked a Personal Info Database with 340M Records

#218
post #23

"exposes" here is quite a strange term, because their entire business is selling that same data. The only difference is that it was briefly available without a price tag.

That assumes they would sell to absolutely any group including terrorists, hate groups and sanctioned countries. At least without the leak they have the option to refuse.

>That assumes they would sell to absolutely any group including terrorists, hate groups and sanctioned countries.

Shell companies and fronts are a great workaround for that.

How do you know who they sell to? And then, after it's been sold the first time, how do you know where the copies of that data are being sold to by the buyer?

Turtles all the way down.

Re: Marketing Firm Exactis Leaked a Personal Info Database with 340M Records

#219

Earlier quoted context omitted.

Let's hope they were the first to discover it.

I hope they were not and this data ends up public. I’d love to search this database for the details of top people at privacy-violating companies and publish them.

> I’d love to search this database for the details of top people at privacy-violating companies and publish them.

Who defines "privacy-violating"? Jumping into the mud because you feel aggrieved just makes you look like a pig.

Re: Marketing Firm Exactis Leaked a Personal Info Database with 340M Records

#220

Earlier quoted context omitted.

The credit card info is called "level 3 data" and they in some cases have line item by line item detail. Not just "spend $24.89 at Meijer store #349" but each individual thing, e.g. you bought 2 avocados.

How does this work with Apple Pay, which doesn't tell the retailer who the consumer is? Does the retailer sell the info, or the credit card company?

Wondered about that too. Apparently Apple Pay does use the same artificial CC number with each payment (maybe only with the same merchant?) so it's still possible to have your purchases tracked over time, even if they don't know who you are.
Post reply on HN