The very recent security breach has been of Decathlon, French Sports Retailer. The breach exposed data of 123 million users. The data mainly consisted of usernames, PII, passwords, of employees, names, mobile numbers, birth dates, and addresses, etc.
The problem occured due to misconfiguration in the database. The database of approximate size of 10 GB was found on Elasticsearch server and the server was unsecured.
The malicious users or cyber-criminals made use of administrator log-in credentials. It helped them conduct espionage. They also sent phishing mails for identity fraud. The company discovered the whole situation after four to five days. The public access and other privileges to the database were shut down immediately.
Get Answers For Free
Most questions answered within 1 hours.