Loading story…
Publicly accessible databases tied to the Tribeca Film Festival exposed records associated with high-profile directors, actors, and other celebrities after a security researcher found multiple systems left unsecured online. Researcher Jeremiah Fowler reported discovering one database that was neither password-protected nor encrypted, then identifying three additional exposed databases, including one labeled development containing 203,370 records.
The exposure appears to have resulted from misconfiguration rather than an intrusion, with the databases reportedly left open to anyone who could access them. Reporting said the leaked information was linked to festival-related individuals and organizations, raising concerns about the handling of sensitive entertainment-industry data and the risk of unauthorized access to records connected to prominent public figures.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Security researcher Jeremiah Fowler reportedly discovered a publicly accessible database associated with the Tribeca Film Festival that was neither password-protected nor encrypted, and then identified three additional unsecured databases. One database labeled "development" reportedly contained 203,370 records, exposing data tied to directors, actors, celebrities, and festival-related individuals.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Organizers of **Abu Dhabi Finance Week (ADFW)** inadvertently exposed sensitive identity documents for roughly **700 attendees** after an associated **cloud storage server was left publicly accessible**. Reporting indicated the exposed files included **passport scans, national ID cards, and other personally identifiable information**, affecting high-profile individuals such as former UK Prime Minister **David Cameron** and other global finance and government figures. An independent security researcher reportedly discovered the dataset using common cloud-scanning tools, and the data may have been accessible for **at least two months** before being addressed. The incident underscores ongoing risk from **misconfigured or unsecured cloud storage** supporting major events and third-party registration workflows, where large volumes of identity documents are collected and retained. Other items in the provided set cover unrelated topics (post-quantum planning, phishing kits, supply-chain malware on Android devices, and general security roundups/advice) and do not add material facts about the ADFW exposure.
Jul 12, 2026
Practice by Numbers remediated an access-control flaw in its dental patient portal after a patient discovered that changing sequential document numbers in the URL let any authenticated user view other patients’ files. The exposed records included private health information, medical histories, personal details, and photo identification. After difficulties reporting the issue through the company’s broken or missing security contact channels, TechCrunch alerted the vendor, which took the portal offline, fixed the bug, and restored service. Practice by Numbers said server logs indicate fewer than 10 patients were affected, that it found no evidence of earlier exploitation, and that it is notifying the impacted dental practice. In a separate privacy exposure, researcher Jeremiah Fowler found a publicly accessible, passwordless database containing 86,859 private images, screenshots, and messages linked to a high-profile European celebrity and several social media influencers. The leaked material included chats from WhatsApp, Facebook, TikTok, and Instagram, along with phone numbers, email addresses, invoices, receipts, and identity-related documents. Fowler said the screenshots appeared to have been captured from victims’ phones, pointing to suspected stalkerware activity before the data was exposed through a misconfigured server, and he notified affected individuals and law enforcement while withholding names to limit further harm.
Jun 29, 2026
Cybernews researchers reported multiple **data exposures caused by misconfigured back-end services**, including consumer mobile apps and a large unprotected database. Three widely downloaded Android AI photo identification apps—*Insect Identifier by Photo Cam*, *Dog Breed Identifier Photo Cam*, and *Spider Identifier App by Photo*—reportedly leaked more than **150,000** users’ data via a **Firebase misconfiguration** with inadequate authentication/access controls. Exposed data included email addresses, usernames, profile photos, notification tokens, and **GPS coordinates**; while passwords were not found, researchers noted the location data could enable stalking, doxxing, and targeted scams, and observed indications that automated bots had already discovered the exposed databases prior to the investigation. The apps were attributed to publisher **MobilMinds** (linked to **OZI Technologies**), and the developers reportedly did not respond to requests for comment. Separately, Cybernews identified an **unprotected Elasticsearch cluster** exposing approximately **8.7 billion records** associated with China, including names, birthdates, home addresses, national ID numbers, social media identifiers, usernames, and other account/platform details; the dataset also reportedly contained **plaintext credentials** and corporate/business records, suggesting long-term aggregation. The database’s ownership was not confirmed, but it was subsequently secured; researchers characterized the exposure as a systemic privacy risk potentially affecting hundreds of millions of individuals. Two additional items in the set describe individual bug-hunting writeups (e.g., bypassing mobile controls and abusing password reset/IDOR-style issues) but do not provide verifiable linkage to the specific Firebase/Elasticsearch exposures described above.
Jun 29, 2026