An Elasticsearch server holding personal data of 6 million players of the popular mobile game Battle for the Galaxy was discovered insecure and containing over 1 terabyte of unencrypted data. The leaked data included 5.9 million player profiles, 2 million transactions and 587,000 feedback messages. The database could provide a rich set of data for cybercriminals to hone their phishing emails to make them look legitimate, WizCase said. The leaky server is now secure, according to WizCase.
Source: https://threatpost.com/battle-for-the-galaxy-leaks/166659/