Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Kars4Kids Data Breach: Donor Records and Admin Credentials Exposed

hackenproof.com | incident | #misconfiguration | #data-breach | #mongodb | #charity | #ransom-note | #donor-data | #exposed-database

Summary

An unsecured MongoDB exposed emails, home addresses, and super admin credentials for 21,612 Kars4Kids donors, with a ransom note demanding 0.6 BTC found inside the database.
Published
Collected

original ↗

Related coverage

incident · hackenproof.com
Adapt.io Data Breach: 9.3 Million Business Contact Records Exposed
An unprotected MongoDB database exposed 9.3 million B2B contact records tied to Adapt.io—what was found, the GDPR risk, and what buyers should know before using it today.
incident · hackenproof.com
FIESP Data Breach: 34 Million Brazilian Records Exposed in an Unsecured Elasticsearch Database
An unsecured Elasticsearch instance discovered via Binaryedge exposed 34.8 million FIESP-tied Brazilian personal records, including names, national ID numbers, home addresses, and contact details.
incident · hackenproof.com
LinkedIn Data Breach: 66 Million Scraped Records Exposed in an Unsecured Database
An open MongoDB database exposed 66 million scraped LinkedIn profiles—what was taken, whether scraping like this is legal, and how it compares to LinkedIn's larger 2021 incident.
blog · hackenproof.com
No More Privacy: 202 Million Private Resumes Exposed in an Unsecured Database
An unsecured 854GB MongoDB database exposed 202 million scraped Chinese resumes with no password—what was found, who denied owning it, and what's changed since.
blog · netspi.com
Why the Telecoms Industry Should Retire Outdated Security Protocols
FCC breach-rule reform highlights why telecoms must retire outdated protocols: CPNI exposure, the T-Mobile breach, and LightBasin attacks argue for end-to-end encryption and secure configurations.
incident · hackenproof.com
French Data Breach: MisterTemp Job Agency Exposed Millions of Records
An unprotected Elasticsearch cluster exposed 2.9 million French job-seeker records, including ID documents—what happened, and why the same company was breached again in 2026.
back