---
id: 7531
title: "Kars4Kids Data Breach: Donor Records and Admin Credentials Exposed"
source_domain: hackenproof.com
source_url: "https://hackenproof.com/blog/kars4kids-data-breach-donor-records-exposed"
published_at: "2018-11-13T14:52:12Z"
tags: ["misconfiguration", "data-breach", "mongodb", "charity", "ransom-note", "donor-data", "exposed-database"]
phying_url: "https://phying.com/item/7531"
lang: en
---

# Kars4Kids Data Breach: Donor Records and Admin Credentials Exposed

## Summary

An unsecured MongoDB exposed emails, home addresses, and super admin credentials for 21,612 Kars4Kids donors, with a ransom note demanding 0.6 BTC found inside the database.

## Intelligence Metadata

- **Sources:** hackenproof.com
- **Published:** 2018-11-13T14:52:12Z
- **Original:** https://hackenproof.com/blog/kars4kids-data-breach-donor-records-exposed
- **Phying News:** https://phying.com/item/7531
