An unsecured database discovered online has leaked thousands of baby photos and videos.
Bithouse, Inc. left unprotected and accessible online an Elasticsearch database containing nearly 100GB of information associated with its app Peekabo Moments. The leaked data includes photos, videos, and birthdates of babies, as well as 800,000 email addresses, location data as well as detailed device information.
The leaked data was discovered by Dan Ehrlich of the security consulting firm Twelve Security.
“I’ve never seen a server so blatantly open,” Ehrlich said of the leak.
The lack of protection of user security seemingly contradicts the company’s promises on the Google Play store.
“Data privacy and security come as our priority. Every Baby’s photos, audios & videos or diaries will be stored in secured space. Only families & friends can have access to baby’s moments at your control,” says the app’s description, which has been downloaded over a million times since 2012.
Bithouse has yet to comment on the leak or take the leaked data offline.
