Security News > 2020 > February > Unsecured Estee Lauder Database Exposed 440 Million Records

An unsecured, internet-facing database belonging to cosmetic giant Estée Lauder exposed over 440 million company records, including email addresses and IT logs, according to a report from a security researcher who discovered it.

It's not clear how long the database may have been exposed or if anyone accessed any of the data, Fowler adds.

"This education platform was not consumer facing, nor did it contain consumer data. We have found no evidence of unauthorized use of the temporarily accessible data. The Estée Lauder Companies takes data privacy and security very seriously. As soon as we became aware, we took immediate action to secure the data and notify appropriate parties."

Earlier this week, reports surfaced that Israel's entire voter registration database - comprising close to 6.5 million people - was exposed to the internet because of an elementary coding flaw in an election application.

In December, over 4 terabytes of data affecting 1.2 billion people was exposed to the internet on an unsecured Elasticsearch server.

News URL

https://www.inforisktoday.com/unsecured-estee-lauder-database-exposed-440-million-records-a-13712