Cybercrime forum Leak Zone publicly exposed its users’ IP addresses

UpGuard discovered an unsecured, internet-accessible Elasticsearch database belonging to Leak Zone that contained more than 22 million records of user login events (IP addresses and exact timestamps). The exposed data—dating as recently as June and updating in real time—could identify users who logged in without anonymization (even indicating suspected VPN/proxy use). TechCrunch verified the leak by creating an account; UpGuard reported the database is no longer online. The exposure appears caused by misconfiguration and underscores risks from criminal forums and improperly secured databases.