Friend
Professional
- Messages
- 2,653
- Reaction score
- 847
- Points
- 113
The MC2 Data leak affected 106 million Americans.
MC2 Data, a background check company, leaked the personal information of a third of the US population. Cybernews' investigation revealed that a 2.2 TB database with more than 106 million records was left without a password and was publicly available on the Internet. The base was discovered on August 7, and how long it was opened is not known at the moment.
MC2 Data and similar companies collect and process information from public sources, including criminal records, employment history, relative data, and contact details. The information is used to create detailed profiles that help employers and landlords make decisions and manage risk.
Sample of leaked data
The data breach affected more than 100 million people, as well as 2.3 million users who signed up for the company's services to conduct checks. The following are in the public domain:
Experts point to the high risks for the victims. The discovery of such a leak raises serious questions about how well such companies protect sensitive data. Cybernews experts noted that such information is of great value to cybercriminals, as it greatly simplifies access to data for fraudulent activities. In addition, the leakage of customer data, which may include employers, landlords, and law enforcement officials, is also alarming.
Sample record of personal data
Cybernews tried to contact MC2 Data, however, the company did not provide comment. At the time of publication, access to the database was closed.
Source
MC2 Data, a background check company, leaked the personal information of a third of the US population. Cybernews' investigation revealed that a 2.2 TB database with more than 106 million records was left without a password and was publicly available on the Internet. The base was discovered on August 7, and how long it was opened is not known at the moment.
MC2 Data and similar companies collect and process information from public sources, including criminal records, employment history, relative data, and contact details. The information is used to create detailed profiles that help employers and landlords make decisions and manage risk.
Sample of leaked data
The data breach affected more than 100 million people, as well as 2.3 million users who signed up for the company's services to conduct checks. The following are in the public domain:
- Names;
- Email addresses;
- IP addresses;
- User Agent;
- Encrypted passwords;
- Payment information (partially);
- Home addresses;
- Dates of birth;
- Phone numbers;
- Real estate records;
- Legal documents;
- Property Registry;
- Data on family, relatives, neighbors;
- Seniority.
Experts point to the high risks for the victims. The discovery of such a leak raises serious questions about how well such companies protect sensitive data. Cybernews experts noted that such information is of great value to cybercriminals, as it greatly simplifies access to data for fraudulent activities. In addition, the leakage of customer data, which may include employers, landlords, and law enforcement officials, is also alarming.
Sample record of personal data
Cybernews tried to contact MC2 Data, however, the company did not provide comment. At the time of publication, access to the database was closed.
Source
