2026-10-29T13:02:22Z https://nostr.now JayeLTee https://nostr.now/npub16t3hcphf7g5xl4ty7f5guqcwwjrw6uc005x0as67r3jt2re6v2tqawdfw5 https://media.infosec.exchange/infosec.exchange/accounts/avatars/111/605/672/867/938/384/original/8ccd3c12a1874fef.png https://media.infosec.exchange/infosec.exchange/accounts/avatars/111/605/672/867/938/384/original/8ccd3c12a1874fef.png https://nostr.now/nevent1qqszuqnw2mhcl039s9mualgshyxr2eh5uuq27zshlqvdyz73wnagfygzyrfwxlqxa8ezsm74vnex3rsrpe6gdmtnpa7selkrtcwxfdg08f3fvzly8lt In reply to <a href='/nevent1qqsywev3qcuppvak7wm7ztkf7u2hdm3ykx78yrtf7p9h45fggf5cfvg84g0nq'>nevent1q…g0nq</a><br/>_________________________<br/><br/>Their dev and staging servers are also publicly exposed 🫠 2025-11-20T19:28:38Z https://nostr.now/nevent1qqs08ecqyqlfxp796e2mgavgkt7rx249q3xvpc9mxc4t3cfzunlvzvczyrfwxlqxa8ezsm74vnex3rsrpe6gdmtnpa7selkrtcwxfdg08f3fvqh554d I received an email earlier this week from EA asking if I wanted to be added to a public acknowledgement page they were creating for individuals who responsibly disclosed vulnerabilities to them.<br/><br/>For all the shit people give EA, of the 100+ companies I contacted in the last two years, they were the only company I would say had a decent incident response.<br/><br/>They fixed the issue within 12 hours after validating it as critical, and proactively provided me multiple updates over time.<br/><br/>When the IR was done on their side, they reached out again with some more information about the potential impact if the issue hadn&#39;t been solved quickly, and also offered me a reward.<br/><br/>I did not have to keep chasing anyone for updates, I wasn&#39;t asked for non-disclosure, or offered money in exchange for it, and people replied instead of ignoring me.<br/><br/>I wasn&#39;t blamed for their mistake, either, or reported to the authorities.<br/><br/>Unfortunately, at least one or multiple of the things mentioned above are present in most of my other incidents reported; it&#39;s a real shit show out there.<br/><br/>#cybersecurity #infosec #responsibledisclosure #vulnerability #ea #electronicarts<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/837/200/252/253/897/original/93db56d29f4bce92.png"> <br/> 2025-07-12T00:21:36Z https://nostr.now/nevent1qqs8y5mrjan20lfaqaeaf0hpxx32my30r988ktdcqf02yx79dz5clzqzyrfwxlqxa8ezsm74vnex3rsrpe6gdmtnpa7selkrtcwxfdg08f3fvy2xk6u US Forensic Lab was leaking phone data extracts for multiple cases, including ongoing ones.<br/><br/>Likely the most sensitive data I&#39;ve found exposed to date, with links to the DOJ in Montana.<br/><br/>Thanks again to <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1m7vxz9lyfxgp4sdc987pwcly0r8yq2vymxarwswdfd9339t3j87sqazdpz" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Martin Seeger</span> (<span class="italic">npub1m7v…zdpz</span>)</a></span> and <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub17l5x90j8qck2eeyjdqhshha8lp6vyq6vh3w7v5qp2gcfzhsma0lshk4kr3" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Dissent Doe :cupofcoffee:</span> (<span class="italic">npub17l5…4kr3</span>)</a></span> for helping get the message to the people responsible for this one.<br/><br/><a href="https://jltee.substack.com/p/forensic-lab-with-links-to-montana-doj-leaks-phone-extracts">https://jltee.substack.com/p/forensic-lab-with-links-to-montana-doj-leaks-phone-extracts</a><br/><br/>#cybersecurity #infosec #unitedstates #usa #us #privacy #dataleak #leak #evidence #phone #forensics #data 2025-06-22T12:42:06Z https://nostr.now/nevent1qqs9969hlhszfzc6nrt0nnptk7g5dqd4p3tg7y0mdjyckstf2zxqdgszyrfwxlqxa8ezsm74vnex3rsrpe6gdmtnpa7selkrtcwxfdg08f3fv3vfa26 All-in-One platform leaks millions of attachments from their clients. <br/><br/>This server contained a bit of everything, from sensitive piercing selfies next to identity docs, to passports, cvs, insurance docs and more.<br/><br/>Read about it here: <a href="https://jltee.substack.com/p/all-in-one-platform-gohighlevel-exposed-attachments-from-clients">https://jltee.substack.com/p/all-in-one-platform-gohighlevel-exposed-attachments-from-clients</a><br/><br/>#cybersecurity #infosec #data #dataleak #leak #gohighlevel #highlevel 2025-03-27T10:50:10Z https://nostr.now/nevent1qqsg00y24hldmjhw9zf06gj6flun70fn9pf3m6u0lz9xvqzvf9gf74szyrfwxlqxa8ezsm74vnex3rsrpe6gdmtnpa7selkrtcwxfdg08f3fvu9437r Dealing with something ridiculous at the moment that is a great example of just how &#39;easy&#39; it really is to close down exposed data:<br/><br/>Found a server recently with no access controls at all that was hit by ransomware in May 2024 and most of the data is encrypted. (It got hit by an automated script, it wasn&#39;t targeted by a ransom group)<br/><br/>Found a non encrypted directory:<br/><br/>The company is STILL uploading, monthly, hundreds of millions of records of logs with their clients data.<br/><br/>Tried to reach out to the company, nothing. Company is from AUS so I tried ASD, nothing.<br/><br/>I sent an email to AUSCERT, they validated with me the issue and forwarded the information and my contact to ASD, they also tried to reach out to the company themselves.<br/><br/>Not a word from anyone and the server is still exposed a month after my initial alerts.<br/><br/>Logs are still being uploaded to the server so it&#39;s obvious no one did anything. <br/><br/>So what am I supposed to do here?<br/><br/>#cybersecurity #infosec #ransomware #asd #australia 2025-03-21T11:59:23Z https://nostr.now/nevent1qqswqg7ck4ctp83n0amkqlw0c6gx83s9sgqlc3zkvh7aehrk4jw3avczyrfwxlqxa8ezsm74vnex3rsrpe6gdmtnpa7selkrtcwxfdg08f3fvhyjt59 In reply to <a href='/nevent1qqsvws9xk6gsmrn39q4qy22pttlr3e926nwd3zqy0s50jk7x5r8zmycnv95xs'>nevent1q…95xs</a><br/>_________________________<br/><br/>Great way to close too, cancel the recurring payment on the day it&#39;s supposed to renew and don&#39;t say anything about it or that they are closing. <br/><br/>Only found out they were closing because I made a post earlier here and someone linked me that same link that is buried on that website.<br/><br/>They also say &#34;All free subscriptions will end on March 31, 2025, as of 11:59 p.m. GMT.&#34; but I checked with multiple people who have free accounts and none of them could do any queries.<br/><br/>Sure makes people want to move to the alternatives they are trying to push on that blog post 😂 2025-03-03T22:35:12Z https://nostr.now/nevent1qqs9ttnc2hl250u4v4gl3pznhf8y72tg6sgtmmsazat6pcx7eq97d8czyrfwxlqxa8ezsm74vnex3rsrpe6gdmtnpa7selkrtcwxfdg08f3fvnyh8j2 I asked for help here some months ago about one of the servers on this post that was hosted by Microsoft. <br/><br/>You can read about how that and other servers with infostealer logs ended up closed.<br/><br/>Hint: MSRC Portal is basically useless.<br/><br/><a href="https://jltee.substack.com/p/billions-of-infostealer-logs-exposed">https://jltee.substack.com/p/billions-of-infostealer-logs-exposed</a><br/><br/>#cybersecurity #infosec #infostealer #data #databases #microsoft 2025-03-03T08:18:40Z https://nostr.now/nevent1qqstzqm24zt4trrff6e66yyfwlafe0asywfxenca8mpaecdljpr5m9szyrfwxlqxa8ezsm74vnex3rsrpe6gdmtnpa7selkrtcwxfdg08f3fv0k4pum 🇳🇿 I&#39;ve had quite a few outrageous responses to my alerts, this is another one of those, sent by teammateapp.com CEO.<br/><br/>After my initial alert and follow up email, I get a reply lying about the severity of the exposure and telling me to stop harassing the company.<br/><br/>This CEO also didn&#39;t know what Proton is and thought I work for them and threatened to report me to them in case I didn&#39;t stop. :blobshrug:<br/><br/>Read about it here: <a href="https://jltee.substack.com/p/new-zealand-companys-impossible-to-hack-security">https://jltee.substack.com/p/new-zealand-companys-impossible-to-hack-security</a><br/><br/>#cybersecurity #infosec #privacy #database #databreach #leak #newzealand #nz #teammateapp #ceo #incidentresponse 2025-02-24T06:34:38Z https://nostr.now/nevent1qqsq7celpeg8tp643q5hpm29fn8f2sz69fkmn2nth4nwegeatf2a79qzyrfwxlqxa8ezsm74vnex3rsrpe6gdmtnpa7selkrtcwxfdg08f3fvz7rglx 🇬🇧 Security company Assist Security exposed over 100,000 sensitive files publicly.<br/><br/>If you&#39;re curious what kind of wild excuses I get from companies, this one tried to claim only the file structure was exposed. Apparently I look at filenames and paths and figure what&#39;s there from the names only and report this to companies :blobwizard: <br/><br/><a href="https://jltee.substack.com/p/security-company-assist-security-exposed-data">https://jltee.substack.com/p/security-company-assist-security-exposed-data</a><br/><br/>#cybersecurity #infosec #leak #dataleak #unitedkingdom #uk #security #AssistSecurity 2025-01-14T12:24:50Z https://nostr.now/nevent1qqsxqus0lqra2fgq2tvfqajzjs2nqvn6za2fsk9dsyp9cnjhqyhh09szyrfwxlqxa8ezsm74vnex3rsrpe6gdmtnpa7selkrtcwxfdg08f3fvv8pjcu 🇲🇽 Cargamos.com, a package delivery company was exposing over 6 million files for over a year.<br/><br/>I&#39;ve always opted to keep trying some other way to get a server closed instead of going public about the issue until earlier this week.<br/>I&#39;ve contacted multiple GOV/CERT emails in Mexico over multiple issues and I never got a meaningful reply.<br/>The company ignored my contact, so I either let it go and see it posted eventually by some &#34;ransomware&#34; group or I make enough noise publicly that the company will get alerted about it.<br/><br/>Today, 2 days after an article came out on a Mexican news website, the exposure was closed down.<br/><br/>Read the article, in Spanish, that made the company close the server down:<br/><br/><a href="https://www.publimetro.com.mx/noticias/2024/12/16/start-up-mexicana-deja-a-merced-de-hackers-6-millones-de-archivos-de-clientes-y-repartidores/">https://www.publimetro.com.mx/noticias/2024/12/16/start-up-mexicana-deja-a-merced-de-hackers-6-millones-de-archivos-de-clientes-y-repartidores/</a><br/><br/>#cybersecurity #infosec #leak #dataleak #mexico 2024-12-18T23:06:24Z https://nostr.now/nevent1qqsrj9mcx26gl50tg00kaqywx7tjuc4c6sv8ucxqd7g57wwgm7fr9qszyrfwxlqxa8ezsm74vnex3rsrpe6gdmtnpa7selkrtcwxfdg08f3fvkl2ra3 A tip to all of you out there struggling to keep your company services accessibility to 100%, if you delete the logs that show the down time, your up time will always be 100% :ablobcool: <br/><br/>#cybersecurity #infosec<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/489/991/451/630/947/original/955dcc7180ab7dc8.png"> <br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/489/991/833/097/144/original/509b204d7f355bfa.png"> <br/> 2024-11-16T01:19:33Z https://nostr.now/nevent1qqsdfd82jvghgdlqa4vjgcvgqrjt9mmyg4zcdyh9xz8vvjpv89e2utczyrfwxlqxa8ezsm74vnex3rsrpe6gdmtnpa7selkrtcwxfdg08f3fv22hd6y In reply to <a href='/nevent1qqs8y2xgnrvx7ddljweckz30369p7eu20dy7wghf7488lhxwvv7060gkzxgk2'>nevent1q…xgk2</a><br/>_________________________<br/><br/>Not paid at all for this unless a company volunteers to offer any reward when I reach out to them. I can barely get them to reply to me at all though 2024-11-04T13:00:59Z https://nostr.now/nevent1qqsglrsqy0wwdys8h6uypsm3tt32gsg46789l7d4946qaqskzgvwh8qzyrfwxlqxa8ezsm74vnex3rsrpe6gdmtnpa7selkrtcwxfdg08f3fvensaj3 🇺🇸 Professional Probation Services ( www.ppsfamily.com ) exposes almost 500,000 US probationers private data publicly, SSNs included, and when I ask them for their intentions regarding disclosure, they go into hiding mode, removing their management and Our companies contact page. <br/><br/>Read more about the exposed data from the company who, according to them, has &#34;A corporate culture of knowing right from wrong, and doing right- every time.&#34;<br/><br/><a href="https://jltee.substack.com/p/ppsfamilycom-professional-probation-services-data-leak">https://jltee.substack.com/p/ppsfamilycom-professional-probation-services-data-leak</a><br/><br/>#cybersecurity #infosec #dataleak #USA 2024-11-04T12:16:42Z https://nostr.now/nevent1qqsq35wuk08uq909g3dc9jzfrfdg999pd8glzpg54dkv8vphenrydugzyrfwxlqxa8ezsm74vnex3rsrpe6gdmtnpa7selkrtcwxfdg08f3fvq5ew3c Anyone on infosec from Germany that might be able to help me out on who to reach out to close some exposed PII?<br/><br/>I found a few, 180+ 😂 , exposed servers from Fire Depts all over Germany.<br/>This servers are exposing drivers licenses for Firefighters and a bunch of legal documents that I&#39;m not sure what they are exactly.<br/><br/>I sent an email to poststelle@bfdi.bund.de and poststelle@lda.bayern.de last Wednesday but no one replied back to me.<br/><br/>#infosec #cybersecurity #dataprotection #germany 2024-10-21T11:20:45Z https://nostr.now/nevent1qqswt8m2dy3xst0f0nt7xjhyc8y7ndg8kc2dvyampqker5llla7w0pszyrfwxlqxa8ezsm74vnex3rsrpe6gdmtnpa7selkrtcwxfdg08f3fvkf4eyn 🇵🇭 Over 400 million customer records exposed for almost 2 months<br/><br/>On August 4th a server showed up on my logs with a total amount of 1.2 billion exposed records between two tables. A lot of the initial entries were basically all null values besides customer type and guid so I didn’t pay much attention to it. <br/>This server kept showing up on my logs over August so at the end of the month I took a better look at it to try and see how much exactly was being exposed in it.<br/><br/>The 1.2 billion records were spread in 2 tables 400+800 million records, the 400 million records seemed to be generated off the bigger table as all emails matched the bigger one.<br/><br/>The records exposed included full name, dob, email, phone number, company name and addresses.<br/><br/>Some stats on the data:<br/><br/>399,043,425 records had at least 3 fields non-null (excluding the guid and cust_type)<br/>2,932,167 email entries - 1,450,248 of them were unique addresses.<br/>3,217 unique gov.ph emails<br/><br/>I could see most of the data belonged to Philippines citizens but I still wasn’t sure who actually owned this so I never ended up sending any emails for this, earlier this week I was gonna take another look at it and saw it wasn’t exposed anymore, according to my logs this stopped being exposed around the 21st of September. <br/><br/>I have an idea of who this might belong to after looking at this again to write this post but, since I’m not sure, I’m not naming any companies.<br/><br/>I attached a picture of the fields exposed on this data and you can check the top 100 email domain counts exposed using this link: <a href="https://pastebin.com/fGKXDcz6">https://pastebin.com/fGKXDcz6</a><br/><br/>#cybersecurity #infosec #dataleak #leak #philippines<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/303/856/815/730/800/original/cee50b43ad384fb3.png"> <br/> 2024-10-14T04:29:17Z