DataBreaches.net

Some further follow-up and resolution of the case: https://www.databreaches.net/prosecution-drops-five-felony-charges-aga…

You're the second person in this thread to claim this? Are you reading something I am not. They talk about exactly how they got it here: http://www.databreaches.net/oops-error-by-systema-software-exposes-mil… Where is it talking about drive rollover being the cause?

From what I can tell Disney has digital and printed menus. A prior article [1] offers more information on how he did it: "...has admitted to hacking into the company’s menu creation software" and "... formerly worked as the company’s Menu Production Manager...". I assume that the software probably controls all menus, both digital and printed. [1] https://databreaches.net/2025/01/13/former-disney-employee-admits-to-h…

I would normally agree but digging into the details of this incident: > Note that this allegedly vengeful former employee also risked public health and safety. By editing the menus to suggest that certain items were safe for people with peanut allergies when they weren’t, he risked people having life-threatening anaphylactic incidents. There is no allegation that anyone was actually harmed or injured, however, as Disney detected the alterations before menus could be sent out to restaurants https://databreaches.net/2024/10/30/fbi-investigated-disney-world-cybe…

Another TechCrunch [dupe] Actual article: https://databreaches.net/2025/03/05/hcrg-cares-lawyers-claimed-an-inju… (https://news.ycombinator.com/item?id=43285101)

From https://databreaches.net/2025/02/24/no-need-to-hack-when-its-leaking-m… DataBreaches also invited Sean Banayan to provide a statement for publication. He replied promptly to this site’s email: "We will further investigate this matter internally and do not wish to entertain this matter with your website." He really missed all the lessons in both manners, common sense and media training.

Ok, we've changed to that from https://www.databreaches.net/giant-leak-exposes-data-from-almost-all-b… Thanks!

de-twittified link https://www.databreaches.net/irans-ban-on-telegram-that-was-intended-t…

Another article on Justin Shafer’s background with the FBI: https://www.databreaches.net/is-a-vendetta-by-the-fbi-keeping-an-innoc…

Then why was this such a huge deal? http://www.databreaches.net/191-million-voters-personal-info-exposed-b…

That's the question: why are the "primary_2000" and "general_2000" fields redacted strings? http://www.databreaches.net/wp-content/uploads/DataFields.jpg

> > revealing what candidates or parties voters chose > This did not happen. The list of fields at http://www.databreaches.net/wp-content/uploads/DataFields.jpg does include 'party', although I suppose that information is only as confidential as the voter registration anyway. EDIT: The replies indicate that my last sentence was unclear. Contrary to what it seemed to say, it meant that, since the voter registration isn't confidential, neither is the party information (except that sometimes the voter registration is confidential, as discussed in the article and my 'uncle' comment (https://news.ycombinator.com/item?id=10801570 )). Maybe I should have phrased it, equivalently but more clearly, as "that information is as public as the voter registration anyway". The point of my comment was just that it is not true that "voters' parties weren't revealed", which I took to be part of dfc's comment (https://news.ycombinator.com/item?id=10801543 ).

> were posted in the clear to Amazon servers by insurers using Systema Software. Posted in the clear? As in, transmitted over unencrypted channels, dumped on public-facing FTP server, or what? > Texan techie Chris Vickery spotted the files Spotted the files? What does this even mean? Did he run some kind of crawler? That can land you in quite a lot of hot water, actively searching for these kinds of files. > on Amazon web servers Public-facing EC2 instances with no authentication? Public-facing S3 files? ???? This article is so scarce on details it's impossible to determine whether AWS, Systema Software, or users of the software are at fault. I'm inclined to point to Systema Software for not knowing how to properly secure their AWS assets. EDIT: as mentioned elsewhere and in the article, the original source for this article is here: http://www.databreaches.net/oops-error-by-systema-software-exposes-mil… HN mods might want to change the submitted URL to that. After reading the article, a production S3 bucket was set to be open to the world. Pretty frightening that Systema would let that happen. Perhaps AWS' Trusted Advisor service should check for that? Tbh I find the article title inflammatory as it implies AWS is at fault or that AWS is in any position to mitigate the problem to begin with. Do we blame car manufacturers when motorists drive drunk?