Security researchers stumbled across a MongoDB database containing the personal details of over 25,000 users who invested in or received Bezop (BEZ) cryptocurrency. The database contained information such as full names, home addresses, wallet information, email addresses, encrypted passwords, and scanned passports, driver’s licenses, or IDs. The data remained exposed online until March 30, when Kromtech researchers spotted the database on a Google Cloud server. A BezOP spokesperson said the database contained details on around 6,500 ICO investors, while the rest was for users who participated in the public bounty program.
Source: https://www.bleepingcomputer.com/news/security/exposed-mongodb-server-exposes-details-of-cryptocurrency-users/