Elsevier, the company behind scientific journals such as the lancet, left a server open to the public internet, exposing user email addresses and passwords.
The impacted users include people from universities and educational institutions from across the world.
It’s not entirely clear how long the server was exposed or how many accounts were impacted
Elsevier secured the server after Motherboard approached the company for comment, hussein also provided Elsevier with details of the security issue.
Source: https://www.vice.com/en/article/vbw8b9/elsevier-user-passwords-exposed-online
"id": "ELS64212323",
"linkid": "elsevier",
"type": "Data Leak",
"date": "03/2019",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"