Meetmindful Database

Details of more the 2.28 million users of dating site MeetMindful have been released online for free in the latest in a series of stolen data dumps.

MeetMindful policy calls for openness and seriousness of purpose. Hide and seek both moderators and local visitors poorly perceive games. If you decide not to synchronize your account on the website with Facebook, you will be asked to fill out several fields with detailed information about. According to its Crunchbase profile, MeetMindful is a dating site platform for “people who are into health, well-being, and mindfulness.” It was founded in 2013, is based in Denver, Colorado,.

  1. This is a preliminary report on MeetMindful’s security posture. If you want in-depth, always up-to-date reports on MeetMindful and millions of other companies, consider booking a demo with us. UpGuard is the new standard in third-party risk management and attack surface management. Our security ratings engine monitors billions of.
  2. Who are MeetMindful users? The platform is relatively new and targets a rather specific audience, which is why no one would expect a very vast user database. Still, given this site’s specific, their numbers are very impressive — 300, 000 total members with almost 40 thousand new users joining every month.

The stolen data includes real names, email addresses, address information, body details, dating preferences, marital status, birth data, location data, IP addresses, Bcrypt-hashed passwords, Facebook user IDs and Facebook authentication tokens. The inclusion of Facebook authentication tokens is particularly notable because it could potentially give access to the Facebook accounts of MeetMindful members in the database.

MeetMindful has not publicly addressed either the theft of its user data or its publication online.

ZDNet first reported the news today, saying only that the data was released by a “well-known hacker” as “a free download on a publicly accessible hacking forum known for its trade in hacked databases.” SiliconANGLE can confirm the data in question was released by ShinyHunters Jan. 20 and the forum was Raid Forums, a popular internet forum used by hackers which is easily found via Google search.

ShinyHunters has been rather busy lately. It was reported last week that it had published 1.9 million stolen user records from the free online photo editing service Pixlr as part of a release of hacked data from various sites. Researchers at cybersecurity intelligence firm Kela Research and Strategy Ltd. also discovered stolen data released on Raid Forums from Wongnai Media Co. Ltd., Tuned Global Pty. Ltd., Buyucoin, Wappalyzer, Teespring Inc. and Bonobos.com.

It’s not known how the data was stolen from MeetMindful, but ShinyHunters is particularly fond of obtaining data from misconfigured Amazon Web Services Inc. databases and S3 buckets.

Meetmindful

“Improperly secured AWS S3 buckets are one of the leading causes of data breaches due to misconfiguration,” Pravin Rasiah, vice president of product at cloud management platform company CloudSphere, told SiliconANGLE. “The chances of leaving an S3 bucket exposed are all too high, as inexperienced users can simply choose the ‘all users’ access option, making the bucket publicly accessible. Leaving these S3 buckets open and exposed invites hackers to exploit the personal data entrusted to companies by their customers.”

To prevent incidents like this from occurring, Rasiah added, “awareness within the cloud environment is imperative. Businesses should invest in a cloud governance platform that provides holistic, real-time observability into the cloud landscape to stay apprised of abnormalities while ensuring that data is secure.”

Image: Raid Forums

Show your support for our mission by joining our Cube Club and Cube Event Community of experts. Join the community that includes Amazon Web Services and soon to be Amazon.com CEO Andy Jassy, Dell Technologies founder and CEO Michael Dell, Intel CEO Pat Gelsinger and many more luminaries and experts.

Database

Join Our Community

Meetmindful Database Download

We are holding our second cloud startup showcase on June 16. Click here to join the free and open Startup Showcase event.

Meetmindful Database

We really want to hear from you. Thanks for taking the time to read this post. Looking forward to seeing you at the event and in theCUBE Club.