KIDSECURITY’S USER DATA COMPROMISED AFTER APP FAILED TO SET A PASSWORD

Summary from the TLDR InfoSec newsletter

A popular parental control app for Android, KidSecurity, provides parents with the ability to set app limits, track their children, and listen to sounds around their children. Researchers discovered an ElasticSearch instance belonging to the app that had no authentication configured. This led to the exposure of private information including phone numbers, email addresses, and portions of credit cards.