A huge database with over 114 million records of US citizens and companies has been discovered sitting online unprotected. The number of individuals impacted by the exposure is estimated to almost 83 million. The root cause for the data exposure was a misconfiguration of the Elasticsearch instances that allowed public access to the data without authentication. The data may belong to a 10-year old data management company called Data & Leads Inc. (cached link) based in Toronto, Canada. The company’s website went offline before publicly disclosing the privacy blunder.
Source: https://www.bleepingcomputer.com/news/security/records-of-114-million-us-citizen-and-companies-exposed-online/

