Security researchers chanced upon a top secret database with sensitive details about millions of individuals.
A misconfigured Elasticsearch cluster exposed sensitive personal details of two million individuals, included in what cybersecurity researchers believe to be a highly confidential database. Volodymyr Diachenko, Head of Security Research at Comparitech, was responsible for the discovery of the records, which appear to form the basis of a terror watch list. The database was left exposed online, without even password protection. “The watchlist came from the Terrorist Screening Center, a multi-agency group administered by the FBI.