A California-based Voice-Over-IP (VoIP) services provider VOIPo accidentally left tens of gigabytes of its customer data accessible to anyone without authentication. The database contained 6.7 million call logs, SMS/MMS messages, and plaintext internal system credentials. VOIPO confirmed that the database also contained “valid data,” which means real production data. The company took down the database offline on January 8, 2019, and the company confirmed that it took it offline.
Source: https://thehackernews.com/2019/01/voip-service-database-hacking.html