Online casino group leaks information on 108 million bets, including user details

[InfoSec News <alerts () infosecnews org>]

https://www.zdnet.com/article/online-casino-group-leaks-information-on-108-million-bets-including-user-details/

By Catalin Cimpanu
Zero Day
ZDNet News
January 21, 2019

An online casino group has leaked information on over 108 million bets, 
including details about customers' personal information, deposits, and 
withdrawals, ZDNet has learned.

The data leaked from an ElasticSearch server that was left exposed online 
without a password, Justin Paine, the security researcher who discovered the 
server, told ZDNet.

ElasticSearch is a portable, high-grade search engine that companies install to 
improve their web apps' data indexing and search capabilities. Such servers are 
usually installed on internal networks and are not meant to be left exposed 
online, as they usually handle a company's most sensitive information.

Last week, Paine came across one such ElasticSearch instance that had been left 
unsecured online with no authentication to protect its sensitive content. From 
a first look, it was clear to Paine that the server contained data from an 
online betting portal.

[...]



--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
https://twitter.com/infosecnews_