Inventory Hive

A vulnerability in the website of Inventory Hive, a property inventory service, leaked members’ personal information.

It included their name and address, along with internal and external property images.

The breach gave access to hundreds of thousands of reports/users' sensitive data across the UK going as back as 2017.

Source: https://portswigger.net/daily-swig/flaw-in-property-inventory-website-exposed-thousands-of-users-home-contents

TPRM report: https://scoringcyber.rankiteo.com/company/inventory-hive

"id": "inv21396123",
"linkid": "inventory-hive",
"type": "Vulnerability",
"date": "06/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Hundreds of thousands',
                        'industry': 'Property Inventory Service',
                        'location': 'UK',
                        'name': 'Inventory Hive',
                        'type': 'Organization'}],
 'data_breach': {'number_of_records_exposed': 'Hundreds of thousands',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Addresses',
                                              'Internal and External Property '
                                              'Images']},
 'description': 'A vulnerability in the website of Inventory Hive, a property '
                'inventory service, leaked members’ personal information. It '
                'included their name and address, along with internal and '
                'external property images. The breach gave access to hundreds '
                "of thousands of reports/users' sensitive data across the UK "
                'going as back as 2017.',
 'impact': {'data_compromised': ['Names',
                                 'Addresses',
                                 'Internal and External Property Images']},
 'title': 'Data Breach at Inventory Hive',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Website Vulnerability'}