Get the latest tech news
A leaky database spilled 2FA codes for the world’s tech giants
An SMS routing company's exposed database was left online without a password, spilling 2FA codes and password reset links to the open web.
Anurag Sen, a good-faith security researcher and expert in discovering sensitivebut inadvertentlyexposed data sets leaking to the internet, found the database. The database had monthly logs dating back to July 2023 and was growing in size by the minute. When asked by TechCrunch, the YX International representative said that the server did not store access logs, which would have determined if anyone other than Sen discovered the exposed database and its contents.
Or read this on TechCrunch
