Two security researchers have found another unsecured Elasticsearch database - this time containing 4TB of personal information belonging to a staggering amount of 1.2 billion people. The data seems to come from two data enrichment companies - People Data Labs (622 million unique email addresses) and OxyData (LinkedIn data). Data enrichment or aggregation providers sell access to large stores of data merged from multiple third-party sources, primarily for companies to gain insights into current and prospective customers.
The leaked data included names, email addresses, phone numbers, as well as LinkedIn and Facebook profile information. However, the server does not belong to the aforementioned companies and it’s unclear who left the data exposed. It is possible that one of the customers of People Data Labs and OxyData is responsible for this enormous data leak.