The data exposure stems from a database left unprotected by a third-party consultant to the firm. Researchers with vpnMentor discovered an unprotected Elasticsearch server owned by Aliznet, which provides consulting services to large firms including IBM, Salesforce, Sephora and Louboutin. The server contained data about international cosmetics and beauty brand Yves Rocher, as well as exposing full personal identifiable information of millions of customers. The leak has wider-reaching consequences than the impact on individual customers, researchers said.
Source: https://threatpost.com/data-leak-impacts-millions/147908/