When a cybersecurity expert named Jeremiah Fowler was exploring the internet, he found something alarming: a huge collection of documents filled with private information that were not protected by a password. This discovery, which he shared on WebsitePlanet, included more than two terabytes of data, such as invoices and contracts belonging to a company called ServiceBridge. ServiceBridge helps with things like scheduling and accounting for businesses that send their workers to different places like homes or offices to do jobs like fixing pools or controlling pests.
Fowler couldn’t say exactly how long this information was out there for anyone to see. ServiceBridge quickly sealed it off from public view after Fowler had warned them. It remains a mystery whether ServiceBridge or another company was responsible for taking care of this sensitive data.
The files that were exposed are like a treasure trove for the wrong people. They contained really personal details about all sorts of businesses, including schools and even casinos in Las Vegas. There were even pictures that showed the inside and outside of buildings and secret codes used for getting past gates.
Keeping information safe is super important, and when something like this slip-up happens, it shows that not everyone in a company might know the right way to handle important data. Security training and following strict rules about handling data are key steps in preventing such mistakes. The US National Institute of Standards and Technology (NIST) even has a free guide to help companies train their staff to be better at protecting important information.
If private documents like invoices are left out in the open, it can lead to fake invoices and people tricking others into paying money or sharing information they shouldn’t. This can happen in dealings between businesses or with customers.
To avoid letting private information slip out, people like Johannes Ullrich, who is a big deal in the cybersecurity training world, say that companies should be constantly checking both their systems and those of their employees for any sign that data might be leaking.
Cybersecurity isn’t impossible, but it does need people to be really careful and put in the work to set up rules and systems to keep data protected.
Discussing this kind of news, especially the scary parts about private information getting out, can make us think about how we keep our own secrets safe. That’s where Diversified Outlook Group steps in. This group can help people and companies learn about how to protect important information and make sure nobody who shouldn’t see it gets a peek. If this sounds like something you or your company needs to think about, you can reach out to Diversified Outlook Group at support@diversifiedoutlookgroup.com.
For those curious about the details of Jeremiah Fowler’s discovery, you can read the full story at this URL: www.csoonline.com/article/3496540/researcher-discovers-exposed-servicebridge-database.html.
