Back to Radar
ST

Straffic

High

In 2020, Straffic exposed over 48 million records via an unprotected Elasticsearch database.

Records exposed
48,580,249 records
Breach date
Breach Feb 14, 2020
Last update
Updated Feb 27, 2020

What data was exposed?

Fields reported as compromised in this breach record.

Email addressesGendersNamesPhone numbersPhysical addresses

Why does this breach matter?

In-depth analysis of the breach and its implications.

In February 2020, the Israeli marketing firm Straffic experienced a data exposure incident involving a publicly accessible Elasticsearch database containing an estimated 300 million rows of sensitive personal data. This data included approximately 49 million unique email addresses along with names, phone numbers, physical addresses, and genders of individuals worldwide. Straffic acknowledged the breach, emphasizing the challenges in achieving absolute security.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Individuals' personal data, including contact and identifying information, were publicly accessible, raising concerns about privacy and misuse.
Business Impact
Reputational damage to Straffic and the recognition of potential legal repercussions pertaining to data protection regulations.
Affected Sectors
  • Marketing
  • Advertising
  • Consulting
Geographic Impact
  • Global

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • Change associated passwords and monitor account activities.
  • Be vigilant against potential phishing attempts.
  • Contact organizations that may have shared your details to understand their response plans.

Preventive Measures

  • Ensure services have proper database access controls.
  • Audit systems regularly for security compliance.
  • Encourage education about data handling and access policies among staff members.

Frequently Asked Questions

Common questions about this breach and what it means for you.

The data was stored on an inadequately protected Elasticsearch server, rendering it publicly accessible.