Latest in Gear

Image credit: Karl Tapales via Getty Images

Millions of text messages were carelessly exposed by a marketing firm

It might not be as serious as it sounds, but it's still concerning.
175 Shares
Share
Tweet
Share
Save

Sponsored Links

Karl Tapales via Getty Images

Yet another exposed database has left public data out in the open, and this time it affects something you might use often: the systems businesses use to text you for appointments. Researchers at vpnMentor recently discovered that TrueDialog, an SMS solution provider for businesses, left "millions" of accounts and "tens of millions" of text messages unprotected on the web. The messages sometimes included sensitive info like recipients' full names, email addresses and phone numbers, but the accounts' data was noticeably worse. You could find usernames, email addresses and a mix of clearly visible and lightly-encrypted passwords, including for commonly-used sites like Facebook and Google.

The company locked down the database on November 29th, a day after vpnMentor got in touch. It's not clear how long the database was left exposed, however, or whether there was any unauthorized access. We've asked TrueDialog for comment.

The exposed messages aren't going to include private conversations, but they still pose a risk. If malicious intruders accessed the database, they could have used some of the information for phishing scams and fraud. For businesses, the exposure was at least as bad -- it could have let attackers hijack accounts, learn about confidential activity and even steal sales leads. This may have also given unscrupulous competitors insight into how TrueDialog works.

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
175 Shares
Share
Tweet
Share
Save

Popular on Engadget

Boeing doesn't expect the 737 Max to resume flying before mid-2020

Boeing doesn't expect the 737 Max to resume flying before mid-2020

View
Vodafone is the latest to leave Facebook's Libra Association

Vodafone is the latest to leave Facebook's Libra Association

View
HP's latest Chromebooks for schools include more durable keyboards

HP's latest Chromebooks for schools include more durable keyboards

View
Some Under Armour fitness devices lose their smarts on March 31st

Some Under Armour fitness devices lose their smarts on March 31st

View
Guardian: Saudi prince’s account used to hack Jeff Bezos via WhatsApp

Guardian: Saudi prince’s account used to hack Jeff Bezos via WhatsApp

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr