Data breach: Millions of accounts at risk

Cyberpeace Tech
Jun 11
2 min read

Updated: Jun 23

A recent data breach has put the cybersecurity world on alert: more than 184 million records were found exposed in an unprotected database, compromising usernames and passwords from platforms such as Apple, Google, Facebook, and even government accounts from multiple countries.

This finding, described as “a cybercriminal's dream”, is evidence of the enormous risks involved in storing sensitive information without proper security measures.

What was found?

The database was discovered in early May by a cybersecurity researcher, who located it on an open server containing more than 47 GB of data. The records included plaintext credentials, accompanied by tags specifying account type, service URL and usernames.

Some passwords were labeled with the word “Senha,” suggesting a possible link to Portuguese-speaking users.

Although the entity responsible for storing the database was not identified, all indications are that it could be a malicious collection, probably resulting from the use of infostealers, programs designed to steal information from infected devices.

Global reach and high-value accounts

In a review of just 10,000 records, hundreds of accounts linked to services such as Facebook, Google, Instagram, Microsoft, Netflix, PayPal, and more were identified. Terms related to financial institutions and digital wallets also appeared, suggesting a potential for massive financial fraud.

Even more troubling was the detection of 220 emails with government domains, belonging to at least 29 countries. This type of leak not only affects individuals, but represents a direct threat to the national security of several nations.

Consequences of a massive data breach

The database was hosted on a World Host Group server, but was operated by a client who had uploaded the information illegally. Following the notification, the company closed the access and assured that it is collaborating with the corresponding authorities to investigate what happened.

Although the data is no longer publicly available, there is still uncertainty as to whether other malicious actors managed to download it before it was deleted.

If so, they could be used for phishing, digital fraud or targeted attacks.

Mexico: a lesson that cannot be ignored

This type of incident can serve as a warning for Mexico, where both the public and private sectors must strengthen their cybersecurity practices. It is vital that Mexican institutions and companies implement measures to protect their users' information, using well-configured databases, password encryption and monitoring systems against unauthorized access.

Conclusion

The data breach that revealed information from millions of accounts around the world makes clear the vulnerability in which we live.

Bad practices in data storage can have catastrophic consequences, both for individuals and governments.

This case should drive urgent improvements in cybersecurity, including in countries like Mexico, where there is still much to be done in terms of digital protection.

At Cyberpeace, we recommend staying informed about cybersecurity issues and other digital threats. Prevention and knowledge are your best allies to protect your online identity. Interested in learning more about cybersecurity and digital privacy? Follow our networks and stay informed.