Veeam mishandles Own Data, exposes 440M Customer E-mails

Veeam left an Amazon-hosted MongoDB instance misconfigured and searchable for several days, exposing about 445 million records from 2013–2017 containing marketing/customer data (names, emails, recipient types, IPs, referrer URLs, user agents and organization size). The database appeared to be part of Veeam's marketing automation infrastructure and was secured after a security researcher notified the company; while the data is described as non-sensitive, it presents a large, structured dataset useful for spammers and phishers.