
Incident: Vic Building Authority exposes MongoDB instance | iTnews

Australian Information Security Incident Reported: December 24 2018
The Victorian Building Authority has confirmed that it left a 30GB MongoDB instance containing half a million records exposed to the internet.
The database, which was uncovered by security researcher Bob Diachenko, contained “API request logs and practitioners details, such as names, addresses, mobile phone numbers, certificate numbers and more”.