Techradar Vibetech Exposes 13.7M Breached Credentials Online
Article Content
- •Vibetech's database exposed 13.7 million records, including sensitive personal information.
- •The data was accessible online without any authentication or encryption.
- •The breach included datasets from major companies like AT&T, Amazon, and PayPal.
An unprotected database linked to Vibetech, an AI software development company in India, exposed 13.7 million records of breached credentials, including names, phone numbers, email addresses, plaintext passwords, and bank account details. The data, collected from previous breaches, was accessible without authentication. Jeremiah Fowler, a cybersecurity researcher, reported that the largest dataset was from an AT&T data leak, containing nearly 8 million records. Other notable datasets included breaches from Amazon, Walmart, and even sensitive records labeled as coming from the FBI and Interpol. Following the disclosure, the database was secured, but the incident highlights ongoing risks associated with exposed breach repositories. Vibetech has not confirmed the legality of collecting such datasets. The incident has raised concerns about the potential misuse of the exposed data for identity theft and financial fraud.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track RedLine and Amazon in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What types of data were exposed?
How was the database secured?
What should individuals do if affected?
Continue Reading
Mass Credential Exposures Across Major Corporations Lunar Cyber reported 747,485 credential exposure events linked to ten large organizations, primarily in technology, finance, and retail. The analysis revealed that infostealer malware and breach databases were responsible for these exposures, with Apple showing over 46 million total events, but only 209,767 tied to…
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…