logo

Global Retailer BuyGoods.com Leaks 198GB of Internal and User PII, KYC data

ID: 79c59b51-4435-5912-8f9b-94295196d05b

STIX ID: report--79c59b51-4435-5912-8f9b-94295196d05b

Feed Name: HackRead

Threat Score
75/100

Date Published: 2024-01-24

Date Updated: 2026-04-22

Author: Waqas

...
...

A misconfigured public cloud database tied to BuyGoods.com exposed 198.3 GB and over 260,000 records containing sensitive personal and financial data (PII, KYC documents, customer selfies, and unredacted credit card information). Researcher Jeremiah Fowler responsibly disclosed the issue and the company acknowledged and began remediation, but the server remained accessible for days; the report warns of identity theft and financial fraud risks and provides recommended security controls (audits, least privilege, encryption, monitoring, patching, and incident response).

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.