U.S. Internet Leaked Years of Internal, Customer Emails

KrebsOnSecurity found that U.S.Internet Corp.'s Securence unit had accidentally published more than a decade of internal and customer email inboxes (over 6,500 domains) in plaintext via a publicly accessible index; the company pulled the data after notification and attributed the exposure to an incorrect Ansible/Nginx IMAP configuration. The report also details abuse of Securence's Url-Shield link-scrubbing service to create redirects to malicious websites, and notes that impacted customers include numerous state and local government domains.