drupe (acquired)

Android App Drupe with 10 Million downloads left users’ photos, audio messages, and other sensitive data exposed to public.

Drupe users were unknowingly uploading some of their data to unprotected and unauthenticated servers on Amazon Web Services.

The amount of data left online was huge , there were billions of images and audio messages left online.

The company fixed the bug within an hour after they were alerted of it, and deleted the files left online.

Source: https://www.vice.com/en/article/gykxqm/drupe-android-app-left-users-photos-and-audio-messages-exposed

"id": "DRU204625722",
"linkid": "drupe---contacts-your-way-",
"type": "Data Leak",
"date": "05/2018",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"