ST

Straffic

High

In 2020, Straffic exposed over 48 million records via an unprotected Elasticsearch database.

48,580,249 recordsBreach Feb 14, 2020Updated Feb 27, 2020

Exposed data classes

Fields reported as compromised in this breach record.

Email addressesGendersNamesPhone numbersPhysical addresses

Detailed Analysis

In-depth analysis of the breach and its implications.

In February 2020, the Israeli marketing firm Straffic experienced a data exposure incident involving a publicly accessible Elasticsearch database containing an estimated 300 million rows of sensitive personal data. This data included approximately 49 million unique email addresses along with names, phone numbers, physical addresses, and genders of individuals worldwide. Straffic acknowledged the breach, emphasizing the challenges in achieving absolute security.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Individuals' personal data, including contact and identifying information, were publicly accessible, raising concerns about privacy and misuse.
Business Impact
Reputational damage to Straffic and the recognition of potential legal repercussions pertaining to data protection regulations.
Affected Sectors
  • Marketing
  • Advertising
  • Consulting
Geographic Impact
  • Global

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • Change associated passwords and monitor account activities.
  • Be vigilant against potential phishing attempts.
  • Contact organizations that may have shared your details to understand their response plans.

Preventive Measures

  • Ensure services have proper database access controls.
  • Audit systems regularly for security compliance.
  • Encourage education about data handling and access policies among staff members.

Frequently Asked Questions

Common questions about this breach and what it means for you.

The data was stored on an inadequately protected Elasticsearch server, rendering it publicly accessible.