Database leak exposes 3.3M Hello Kitty fans
csoonline.com
Database leak exposes 3.3M Hello Kitty fans
1–10 of 57 posts
Re: Database leak exposes 3.3M Hello Kitty fans
#2So, are we going to see extortion attempts like in the Ashley Madison leak? "We know you like Hello Kitty"...
Re: Database leak exposes 3.3M Hello Kitty fans
#3So, are we going to see extortion attempts like in the Ashley Madison leak? "We know you like Hello Kitty"...
Well, I seriously use my hellokitty.com email address.
Re: Database leak exposes 3.3M Hello Kitty fans
#4> Update 2: Earlier this afternoon, Chris Vickery confirmed that the three IP addresses that were disclosing user information have been secured. The issue wasn't a hack, but a misconfigured MongoDB installation.
> The source of the configuration error isn't clear, as neither the ISP nor Sanrio has answered questions on the matter.
A MongoDB database open to the outside world on a public IP address?
Re: Database leak exposes 3.3M Hello Kitty fans
#5Reuters headline:
"Hello Kitty fan site exposed, but no data stolen: web host"
"There is no evidence any data has been stolen, the Hong Kong-based company hosting the data said on Tuesday."
http://in.reuters.com/article/us-sanrio-cyberattack-idINKBN0...
Re: Database leak exposes 3.3M Hello Kitty fans
#6Found when I Googled for more information...
"Hello Kitty and Minnie Mouse arrested after fight over tip money in New York's Times Square."
http://www.mirror.co.uk/news/weird-news/hello-kitty-minnie-m...
Re: Database leak exposes 3.3M Hello Kitty fans
#7So, are we going to see extortion attempts like in the Ashley Madison leak? "We know you like Hello Kitty"...
What's the shame in that.
Re: Database leak exposes 3.3M Hello Kitty fans
#8> Update 2: Earlier this afternoon, Chris Vickery confirmed that the three IP addresses that were disclosing user information have been secured. The issue wasn't a hack, but a misconfigured MongoDB installation. > The source of the configuration error isn't clear, as neither the ISP nor Sanrio has answered questions on the matter. A MongoDB database open to the outside world on a public IP address?
i.e. the default configuration
But yeah, that's not good.
Re: Database leak exposes 3.3M Hello Kitty fans
#9> Update 2: Earlier this afternoon, Chris Vickery confirmed that the three IP addresses that were disclosing user information have been secured. The issue wasn't a hack, but a misconfigured MongoDB installation. > The source of the configuration error isn't clear, as neither the ISP nor Sanrio has answered questions on the matter. A MongoDB database open to the outside world on a public IP address?
i.e. the default configuration But yeah, that's not good.
Oh I see. Assumed it was like mysql/mariadb where secure_installation by default asks to remove access from outside.
It also implies frontend server includes the DB, typically a sysadmin would de-couple it so this shows lack of experience.
Re: Database leak exposes 3.3M Hello Kitty fans
#10> Update 2: Earlier this afternoon, Chris Vickery confirmed that the three IP addresses that were disclosing user information have been secured. The issue wasn't a hack, but a misconfigured MongoDB installation. > The source of the configuration error isn't clear, as neither the ISP nor Sanrio has answered questions on the matter. A MongoDB database open to the outside world on a public IP address?
These things happen to the best: In 2001, the World Economic Forum had their MS-SQLServer with personal data of the participants connected to the Internet. With the standard account enabled (user: "sa", password: empty). It then got "hacked" and the data leaked.
German article about it: https://www.woz.ch/-41f8