Led by Noam Rotem and Ran Locar, vpnMentor’s research team recently discovered a massive, incredibly damaging data breach from Phlebotomy Training Specialists. Phlebotomy Training Specialists is a medical training platform connecting people who are hoping to get certified as phlebotomists with

Led by Noam Rotem and Ran Locar, vpnMentor’s research team discovered a data breach in the Indonesian government’s eHAC program created to tackle the COVID-19 pandemic spread in the country. eHAC is a ‘test and trace’ app for people entering Indonesia to ensure they’re not carrying the virus

Led by Noam Rotem and Ran Locar, vpnMentor’s research team discovered a data breach belonging to Chinese mobile gaming company EskyFun. The company was using an unsecured server to store vast amounts of data collected from users on its games. Much of this data was incredibly sensitive, and there

Led by Ran Locar and Noam Rotem, vpnMentor’s research team discovered that B2B marketing company OneMoreLead was leaking the private data of up to 126 million American people. OneMoreLead was storing all this information on an unsecured database, which the company had left completely open. As a

Led by Noam Rotem and Ran Locar, vpnMentor’s research team discovered a data breach in an API used by baby clothing apparel giant Carter’s.  The biggest name in the US Baby’s apparel industry, Carter’s, was using a famous URL shortener tool for order confirmations on its USA e-commerce store.

Led by Noam Rotem, vpnMentor’s research team discovered a data breach by French consulting firm Bluenove that indirectly exposed thousands of employees and customers from sporting goods giant Decathlon. The data breach appears to originate from a survey undertaken by Bluenove on Decathlon’s

Led by Noam Rotem, vpnMentor’s research team discovered a data breach belonging to popular Indian parenting and e-commerce brand BabyChakra. Based on our research, BabyChakra was storing over 5 million files from its customers entirely out in the open, exposing 100,000s of families across India

Our team of security researchers was researching dating apps client-side security, and one of the main focus targets was Tinder. After initial reconnaissance steps were done, a Tinder domain with multiple client-side security issues was found - meaning hackers could have access to users'

If you took a look at this post on December 13th, you would have seen something very different. We decided to post about different IP leaks. So, why don't we have that post anymore? A few VPNs contacted us and told us the research we presented isn't fair to them. While we expected such

vpnMentor’s research team recently received a report from an anonymous ethical hacker about a massive data leak exposing users of over 70 adult dating and e-commerce websites from around the world. The various websites were all using the same marketing software built by email marketing company

Led by cybersecurity analysts Noam Rotem and Ran Locar, vpnMentor's research team discovered a leak in a database belonging to the online retailer LightInTheBox. A massive database, it contained over 1TB of daily logs and compromised the security of LightInTheBox customers across the globe. Not

Led by cybersecurity analysts Noam Rotem and Ran Locar, vpnMentor's research team discovered a data breach in a database belonging to South Africa ICT company, Conor. The breached database contained daily logs of user activity by customers of ISPs using web filtering software built by Conor. It

Led by Noam Rotem and Ran Locar, vpnMentor's research team discovered a breach on a database belonging to Genius, an Android app built by French postal service La Poste. Genius is an app-based cash register that integrates many different processes to help small shop owners. The database in question

vpnMentor's research team recently discovered a data breach in a Romanian web platform owned by the international tobacco company British American Tobacco (BAT). BAT is based in the United Kingdom. It is one of the world's largest manufacturers of tobacco and nicotine products. Led by

Introduction Led by Noam Rotem and Ran Locar, vpnMentor’s research team discovered a breached database belonging to the American communications company, TrueDialog. TrueDialog provides SMS texting solutions to companies in the USA and the database in question was linked to many aspects of their

Data security experts Noam Rotem and Ran Locar, along with vpnMentor’s research team, discovered a breach in two databases belonging to the French technology and business group Groupe Phosphore.  The databases in question had indices named after two Groupe Phosphore brands: Henrri, a free

vpnMentor’s research team, led by renowned analysts Noam Rotem and Ran Locar, recently discovered a security breach in a database belonging to video editing platform VEED.io. London-based VEED gives users the tools to upload videos and optimize them for sharing on social media. With over 50,000

Led by Noam Rotem and Ran Locar, vpnMentor’s research team discovered a data breach belonging to Gekko Group, a subsidiary of Accor Hotels.  Based in France, Gekko Group is a leading European B2B hotel booking platform that also owns several smaller hospitality brands. These include Teldar

vpnMentor’s research team, led by Noam Rotem and Ran Locar, were recently informed of a huge lapse in security by PayMyTab that exposed the data of consumers across the USA. PayMyTab supplies restaurants across the US with card and mobile payment terminals that offer customers and businesses a

Led by Noam Rotem and Ran Locar, vpnMentor’s research team discovered a breach in a database belonging to Autoclerk, a reservations management system owned by Best Western Hotels and Resorts Group. Connected to various travel and hospitality-related platforms online, the exposed database posed a

Led by Noam Rotem and Ran Locar, vpnMentor’s research team discovered a data leak in the AsusWRT, a web-based app from Asus that allows users to manage their wifi network. AsusWRT is a graphical interface app that combines with an Asus router to create a private wifi network in a user’s home.