Over 58 million client records from data storage company Modern Business Systems have been exposed online by hackers.
Personal data including names, dates of birth, phone numbers, email and postal addresses, work titles, car information, and IP addresses are all included in the records.
The files belonged to MBS, which was exposing an unprotected MongoDB database online, according to experts who examined it.
The database contains information from businesses that the MBS serves as a client. At least 58 million records that were taken from the business were made public by the hacker.
Source: https://securityaffairs.com/52306/data-breach/modern-business-systems-hack.html
TPRM report: https://scoringcyber.rankiteo.com/company/mbscopiers
"id": "mod18651123",
"linkid": "mbscopiers",
"type": "Breach",
"date": "10/2016",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': 58000000,
'industry': 'Data Storage',
'name': 'Modern Business Systems',
'type': 'Data Storage Company'}],
'attack_vector': 'Exposed MongoDB Database',
'data_breach': {'data_exfiltration': True,
'number_of_records_exposed': 58000000,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information',
'Contact Information',
'Work Information',
'Car Information',
'IP Addresses']},
'description': 'Over 58 million client records from data storage company '
'Modern Business Systems have been exposed online by hackers. '
'Personal data including names, dates of birth, phone numbers, '
'email and postal addresses, work titles, car information, and '
'IP addresses are all included in the records. The files '
'belonged to MBS, which was exposing an unprotected MongoDB '
'database online, according to experts who examined it. The '
'database contains information from businesses that the MBS '
'serves as a client. At least 58 million records that were '
'taken from the business were made public by the hacker.',
'impact': {'data_compromised': ['Names',
'Dates of Birth',
'Phone Numbers',
'Email Addresses',
'Postal Addresses',
'Work Titles',
'Car Information',
'IP Addresses'],
'systems_affected': 'MongoDB Database'},
'title': 'Data Breach at Modern Business Systems',
'type': 'Data Breach',
'vulnerability_exploited': 'Unprotected Database'}