Amateur adult content website Frivol.com had 479,000 unique user emails, including some corporate email addresses, inadvertently exposed by an unprotected Kibana instance last month, reports Cybernews.
Immediate action addressing the misconfiguration has been taken by Frivol.com, which refuted any data leak stemming from the incident.
"No customer data was stored in the affected system. At no point was there any risk of a data leak. Only insignificant log data was affected," said a Frivol.com representative.
Despite the absence of any evidence suggesting misuse of the leaked information, such data could have been discovered by threat actors, who could then use it for social engineering and sextortion attacks, according to the Cybernews research team.
"The incident highlights how vulnerable even the tiniest amount of personal data can become if not handled properly by the company, as well as the importance of separating personal and professional online activity, and assessing one's digital footprint," said Cybernews researchers.
Immediate action addressing the misconfiguration has been taken by Frivol.com, which refuted any data leak stemming from the incident.
"No customer data was stored in the affected system. At no point was there any risk of a data leak. Only insignificant log data was affected," said a Frivol.com representative.
Despite the absence of any evidence suggesting misuse of the leaked information, such data could have been discovered by threat actors, who could then use it for social engineering and sextortion attacks, according to the Cybernews research team.
"The incident highlights how vulnerable even the tiniest amount of personal data can become if not handled properly by the company, as well as the importance of separating personal and professional online activity, and assessing one's digital footprint," said Cybernews researchers.
