WIKIFX REPORT: Online trading broker FBS exposes 20TB of data with 16 billion records
Abstract：The leaked data also included unredacted credit cards and passports of millions of users around the world.
" />The leaked data also included unredacted credit cards and passports of millions of users around the world.
The team of security researchers at WizCase led by Ata Hakcil discovered a massive trove of data belonging to FBS, a prominent online trading broker with offices in Belize and Cyprus.
FBS is home to 16 million traders and 400,000 partners from over 190 countries.
Data exposed on an Elasticsearch server
According to researchers, FBS exposed almost 20 terabytes worth of data comprising over 16 billion records. As a result, millions of FBS customers had their personal and sensitive information accessible online.
It is worth noting that the data was left open to public access on an Elasticsearch server without any security authentication. This means that anyone with knowledge of unsecured databases could have downloaded the data with no password required.
What data was exposed？
The data, that was thoroughly analyzed by the WizCase team included:
Country
Addresses
Full names
IP addresses
Email addresses
Phone numbers
Passport numbers
Operating system
Mobile device models
Emails sent to FBS users
Social media IDs including Facebook and Google
Whats worse is that the company also exposed files sent by users for account verification or identity confirmation. This included the following:
Personal photos
Drivers licenses
Birth certificates
Bank statements
National ID cards
Unredacted credit cards
The fact that FBS uploaded unredacted credit cards on a web server and left them exposed for public access could have a devastating impact on unsuspecting users including empty bank account, identity theft, extortion, and blackmailing scams to name a few.
However, the list of exposed data does not end here. In their blog post, Chase Williams of WizCase wrote that FBS also exposed its users IDs, their login history, unencrypted passwords encoded in base64, links to reset the password, and other sensitive information.
Read more
Plus500 Has Signed A 4-Year Global Partnership Contract With The Chicago Bulls
Plus500, an online trading company, has signed a multi-year sponsorship partnership with the Chicago Bulls, the most illustrious professional basketball team in the National Basketball Association and one of the most venerable sports organizations in the world.
Tickmill UK Sees 86% Profit Jump in 2021 despite a Revenue Decline
Revenue for the year declined by 8.3 percent. Trading volume also remained flat.
Match-Trade Technologies Promotes Michał Karczewski as CEO
He was the COO of the company for almost six years. Match-Trade ended 2021 with solid figures.
cTrader "Preferred Alternative" for Brokers after MT4 and MT5 Ban on App Store
cTrader received 53% of the vote in the Finance Magnates survey. It was well ahead of its competitors, including MatchTrader and Leverate.
WikiFX Broker
Latest News
OvalX (formerly ETX Capital) Loses Money in 2021, Client Count Increases
WikiFXPlus500 Has Signed A 4-Year Global Partnership Contract With The Chicago Bulls
WikiFXBeware This Unregaluated Broker CryptoAllDay - Scam Alert!
WikiFXAnalysis-Under water: how the Bank of England threw markets a lifeline
WikiFXPU Prime’s Mohanad Yakout Joins OnePro as Global Head of Market Research
WikiFXBank of England’s FX Dealer Chris Mills Departs after 18 Years
WikiFXOvalX (Previously ETX Capital) Turns Loss in 2021, Client Count Jumps
WikiFXOver trading a sure way to blow your account
WikiFXPound jumps on UK tax cut reversal, oil swings higher
WikiFXInstant View: British pound up as govt makes U-turn on tax cut plan
WikiFXRate Calc
