An unsecured Elasticsearch database exposed the personal information of 8 million people from the U.S. who participated in online surveys, sweepstakes, and requests for free product samples. The records contained personal information such as their full name, address, email address, phone number, date of birth, gender, and IP address. The owner of the database was owned by a parent company named Ifficient, who describes themselves as a “performance based marketing”” company. Ifficient said they secured the database on May 11th
Source: security