Massive Cloud Database Leak Exposes 380 Million Records

A security researcher discovered an unsecured cloud database allegedly belonging to Zenlayer that exposed 384,658,212 records (57.46 GB) including internal server logs, application and vendor logs, VPN records, IP addresses, and customer contact data; the exposure was accessible without authentication and could facilitate phishing, social engineering, network mapping, and other malicious activity. The researcher notified Zenlayer, the database was secured the next day, and Zenlayer later confirmed the issue was patched and that they are engaging with the researcher, though it remains unclear whether the database was managed by Zenlayer or a third party and whether it was accessed before remediation.