AUSTRALIAN FOOD SERVICE PROVIDER'S INTERNAL RECORDS AND INVOICES EXPOSED IN THIRD PARTY DATA BREACH

Summary from the TLDR InfoSec newsletter

Security researcher Jeremiah Fowler discovered an unprotected database belonging to Patties Food Limited that was internet accessible. The database contained nearly 500K internal logs which exposed internal, customer, and vendor emails. The database also contained over 25K invoices which included vendors, contacts, emails, and banking information. The databases were managed by a third party known as Proveno.ai, which has responded to the responsible disclosure and protected the databases.