EXPERTS FOUND AN UNSECURED 16TB DATABASE CONTAINING 4.3B PROFESSIONAL RECORDS

Summary from the TLDR InfoSec newsletter

An unsecured 16TB MongoDB database was discovered on November 23. The database contained 4.3 billion professional records, including LinkedIn-like data such as names, emails, phone numbers, job roles, employers, work histories, and social media accounts. It was secured two days after discovery, but prior access remains unknown. This exposed data could facilitate large-scale AI-powered social engineering, phishing attacks, CEO fraud, and credential stuffing by enabling automated personalized messaging and profile enrichment when combined with other breach data. Security teams should urgently monitor threat intelligence, improve email security to prevent AI-driven phishing, and train users to recognize advanced social engineering that exploits professional profiles.