7.5 million Adobe Creative Cloud users are left open to phishing campaigns after their records were left exposed to the internet. The Elasticsearch database could be tapped without a password or any other authentication; offering an attacker access to email addresses, account information and which Adobe products users purchased. The data did not include payment information or passwords. Adobe is no stranger to data privacy problems; in October 2013, attackers stole 3 million customer IDs, encrypted passwords, along with the source code for a number of products.
Source: https://threatpost.com/adobe-creative-cloud-users-exposed-hackers/149563/

