The breaches occurred due to misconfigured Firebase instances within the apps, which lacked proper authentication and access controls, leaving databases exposed, Cybernews researchers found.
The compromised data includes transaction records for various tracking and monitoring apps, such as Geofinder, uMobix, Peekviewer, and Xnspy, all supplied by a Ukrainian company identified as Struktura, which also operates under the name Ersten Group.
CyberScoop reports that the Department of Homeland Security's alleged abuse of facial recognition tools and other biometric technologies has prompted the DHS Office of the Inspector General to launch an audit into the privacy practices of the agency, with the probe confirmed to initially focus on the department's Immigration and Customs Enforcement and the Office of Biometric Identity Management sub-components.
