3 ms·
Wait, this is 75 records? What kind of leak is that? Seems far more likely to be one user accessing data over an insecure network and having that session captur
by lazyasciiart 9y ago
Wait, this is 75 records? What kind of leak is that? Seems far more likely to be one user accessing data over an insecure network and having that session captured, or similar one-instance leak. But on the other hand...what are the odds this journalist was one of a random 75 records?
- nthcolumn 9y agoGiven certain details they were performing lookups on demand for a price. This does not suggest server ingress, it implies lack of bulk exfil. Access to a logged-in authenticated session. Nothing like Google/Royal Free Hospital heist.
- caf 9y agoThey had successfully sold 75 records as of the date of the journalist's investigation. But that was a demand-side limitation - they apparently could supply any record on request.