A French online shop Kool King specifically tailored to be used by kids who bought Burger King menus exposed nearly 37,900 records after a cyber attack.
The data was leaked because the database storing it was misconfigured, allowing anyone with an Internet connection and the knowledge to find it to get to the records stored within.
Since the database was not secured in any way and publicly accessible, anyone who reached it could then edit, download, or even destroy the data without needing admin credentials.
The information compromised contained personally identifiable information (PII) such as emails, passwords, names, phones, DOB, voucher codes, links to the externally stored certificates, etc.100
"id": "BUR22620323",
"linkid": "burger-king",
"type": "Data Leak",
"date": "05/2019",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"