Etsy-Owned Music Sales Site Reverb Hit With Data Breach

Last week , security consultant Bob Diachenko found an unsecured database die hard by the Etsy - have medicine marketplaceReverb .

The bring out database , which contained exploiter data like headphone numbers , electronic mail , address , and even order data , was dangerous in its own right , but then Diachenko figured out how many customers were affected : 5.6 million , by his reckoning , an exceedingly huge rift that has become a sadly normal experience for on-line e - commercialism customer .

“ At first , it was n’t at once clear who owns this and what type of information it is , so I put it on a ledge — until now . Since the discovery , the IP with the database was take down , ” said Diachenko in aLinkedInpost . “ Upon closer inspection , I noticed that there are many ‘ test ’ emails coming from @reverb.com knowledge domain . I settle to verify store slugs against real URLs on the Reverb site and quickly confirmed the initial thought — it was all Reverb drug user ’ data . ”

Photo: VALERIE MACON / Contributor (Getty Images)

The waiter was an unprotectedElasticsearchinstance , a type of subject - seed database that can act as a superfast hunting railway locomotive . The tool , used by many online retailer and social media sites , allows for flying lookups of various scrap of data include , in this case , instant access to customer data point . This divine service should be locked down , but Diachenko has found multiple instances where the search engine was wide overt to all comers .

Diachenko checked the data and found it contained some interesting Reverb client .

“ To affirm my thought , I ran a quick check and was able to find several high - profiled vendor details , include Bill Ward of Black Sabbath , Jimmy Chamberlin of the Smashing Pumpkins , Alessandro Cortini of Nine Inch Nails and more , ” he compose .

Screenshot: Volodymyr Diachenko

Screenshot: Volodymyr Diachenko

Reverb , for its part , beam an emailnotifying customersof the breach .

Reverb is a medicine paraphernalia marketplacethat craft market place Etsy buy in 2019.Etsy claim it design “ to leverage its mart expertness to help Reverb further graduated table and grow . ”

We have reached out to Reverb for lucidness on the breach .

Image: HotforSecurity