Tokee messaging app exposes 1.2 million users’ data in MongoDB leak

The Tokee messaging app has exposed the data of approximately 1.2 million users due to an unprotected MongoDB database, according to a recent report by Tech Radar.

Security researchers at Cybernews discovered that a MongoDB instance belonging to Deucetek, the developer of Tokee, was left unsecured and accessible. The exposed information includes user names, phone numbers, avatars, device tokens, user IDs, account creation and update timestamps, last seen activity, and account status. While chat logs were encrypted and not immediately at risk, the leaked personal data poses significant privacy and security concerns.

Deucetek has since secured the database, and there is no evidence of malicious access or data appearing on the dark web. However, users are advised to be vigilant against potential phishing attempts, especially those impersonating Tokee or Deucetek.

Source: Tech Radar