MeetMindful Breached ,Data posted online

Details of more the 2.28 million users of dating site MeetMindful have been released online for free in the latest in a series of stolen data dumps.

The stolen data includes real names, email addresses, address information, body details, dating preferences, marital status, birth data, location data, IP addresses, Bcrypt-hashed passwords, Facebook user IDs and Facebook authentication tokens. The inclusion of Facebook authentication tokens is particularly notable because it could potentially give access to the Facebook accounts of MeetMindful members in the database.

MeetMindful has not publicly addressed either the theft of its user data or its publication online.

ShinyHunters has been rather busy lately. It was reported last week that it had published 1.9 million stolen user records from the free online photo editing service Pixlr as part of a release of hacked data from various sites.

Improperly secured AWS S3 buckets are one of the leading causes of data breaches due to misconfiguration. The chances of leaving an S3 bucket exposed are all too high, as inexperienced users can simply choose the ‘all users’ access option, making the bucket publicly accessible. Leaving these S3 buckets open and exposed invites hackers to exploit the personal data entrusted to companies by their customers.

Businesses should invest in a cloud governance platform that provides holistic, real-time observability into the cloud landscape to stay apprised of abnormalities while ensuring that data is secure.