Vibetech Database Misconfiguration Exposes 13.7 Million Records Including FBI and AT&T Data

A misconfigured database operated by Vibetech has inadvertently exposed approximately 13.7 million records to the public internet. According to a report by Hackread, this exposure includes sensitive data from previous security breaches, compromising personal information, financial details, and authentication credentials for millions of individuals.

The exposed dataset contains a wide variety of sensitive information that was previously stolen in other incidents. Hackread notes that the records include passwords, bank account details, and other personally identifiable information. This aggregation of historical breach data creates a significant risk for individuals whose information has been compromised in the past, as it centralizes their sensitive data in a single, easily accessible location.

Scope of the Exposure

The volume of exposed data is substantial, totaling 13.7 million distinct records. This figure represents a large-scale aggregation of information from multiple prior security incidents. The misconfiguration allowed unauthorized access to this repository without requiring authentication or bypassing security controls. The breadth of the data suggests that Vibetech or an associated entity was storing or processing historical breach data, which then became publicly accessible due to the configuration error.

Affected Entities and Data Types

The leaked records include data linked to several high-profile organizations and government bodies. Hackread specifically identified records associated with AT&T, the consumer electronics company Casio, and the Federal Bureau of Investigation (FBI). The presence of FBI data is particularly notable, as it implies the exposure of information related to law enforcement operations or personnel. Additionally, the dataset contains financial information, including bank details, which could facilitate fraud or identity theft if exploited by malicious actors.

What should you do?

Security professionals and affected individuals should monitor for signs of credential stuffing or identity theft resulting from this exposure. Organizations should review their data handling practices to ensure that historical breach data is not stored in easily accessible configurations. While no immediate patch or fix has been confirmed by Vibetech for this specific misconfiguration, users should assume their data may be exposed if they were victims of previous breaches involving the named entities.

What to do and how to stay safe: Vibetech

• Check if your email or phone number appears in known breach databases to assess exposure risk.
• Enable multi-factor authentication on all critical accounts to mitigate the risk of password reuse.
• Monitor bank and credit card statements for unauthorized transactions or suspicious activity.
• Review privacy settings on social media and professional networks to limit further data aggregation.

General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

How many records were exposed in the Vibetech database leak?

Approximately 13.7 million records were exposed due to a misconfigured database, according to Hackread.

Which major organizations are mentioned as having data in the leak?

The report identifies data belonging to AT&T, Casio, and the FBI among the exposed records.

What type of sensitive information was included in the exposed database?

The database contained passwords, bank details, and other personal information from previous data breaches.