It’s challenging to remember various passwords, so we often resort to using a single password for multiple accounts. Why? Because it feels convenient, and indeed, it is. However, have we ever considered the consequences if one of those passwords were to be compromised? The risk doesn’t just affect losing access to one account; it could potentially jeopardize all of your accounts. This concern became a stark reality when reports of an app called MyEstatePoint Property Search’s data leak appeared. It resulted in the data leak of nearly half a million registered users. It exposed sensitive information such as their full name, email address, mobile number, password, and more.
The app is MyEstatePoint Property Search, an Indian real estate app
Cybernews’ research team exclusively unveiled that a real estate app named MyEstatePoint Property Search, which offers various features for property seekers, inadvertently left a MongoDB server accessible to the public. And, this server contained valuable and private information about the users of the app. The report adds that NJ Technologies, an India-based software developer, developed this app. Interestingly, it boasts an impressive user base, with over half a million downloads from the Google Play Store alone, not to mention downloaded on third-party app stores.
How folks at Cybernews accessed leaked & sensitive data
On November 6th, good people at Cybernews found out that a database called MongoDB was accidentally made public. It means anyone could access it. They claimed they notified the developers about this occurrence, but the developers did not reply. The data in the database was very personal, like people’s names, email addresses, and even their passwords in plain words. It also had their phone numbers, where they live, what kind of work they do, and how they signed up for the app.
It’s unclear who exposed the data containing users’ sensitive information made it to the public. However, it underscores the importance of using unique passwords for each account and being vigilant when entering personal information. Data leaks happen on a constant basis, and you’ll want to make sure that all of your accounts aren’t using the same passwords.