Original Release Date: 12/10/2019
Researchers at VPNMentor identified an unsecured Elasticsearch database belonging to TrueDialog, a short message service (SMS) provider specializing in solutions for small and large businesses as well as educational facilities and amassing over 5 billion subscribers. Breached data includes private SMS text messages, username and passwords, emails, and other personally identifiable information (PII), impacting over 100 million users in the US alone. The database was taken offline immediately upon notification. At the time of this writing, TrueDialog has not disclosed if they will be notifying customers of the breach. Users are advised to avoid sharing sensitive information over SMS.