An open Elasticsearch server has exposed the rich profiles of more than 1.2 billion people to the open internet. The data includes names, personal and work email addresses, phone numbers, Twitter and Github URLs, and other data commonly available from data brokers. If accessed by cybercriminals, the data could be used for highly effective, targeted phishing attacks, business email compromises and identity theft, among other things. All of the information was unprotected, with no login needed to access it.
Source: https://threatpost.com/data-enriched-profiles-1-2b-leak/150560/

