TLDR InfoSec · ATTACKS & VULNERABILITIES

EY EXPOSES 4TB+ SQL DATABASE TO OPEN INTERNET FOR WHO KNOWS HOW LONG

theregister.com4 min read

Summary from the TLDR InfoSec newsletter

EY accidentally left a massive, unencrypted 4TB SQL Server backup file publicly accessible online, exposing sensitive data that included API keys, passwords, and credentials. The database became accessible due to a misconfigured cloud bucket. The breach's duration is unknown. EY responded swiftly after being alerted and resolved the issue within a week, likely preventing further damage.