A digital risk management company called DarkBeam exposed records containing user emails and passwords from both previously disclosed and unreported data breaches by leaving an Elasticsearch and Kibana interface open.
It appears that DarkBeam has been gathering data to notify its clients in the event of a data breach.
The issue will probably have an impact on more people than just DarkBeam users.
Although the majority of the information that has been released originates from well-known sources, the thorough organization of this information poses a serious threat to those whose credentials have been revealed.
Threat actors may utilize the personal information of impacted individuals to construct well-designed phishing operations.
Source: https://securityaffairs.com/151566/security/darkbeam-data-leak.html
"id": "DAR02321023",
"linkid": "darkbeam",
"type": "Data Leak",
"date": "09/2023",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"