AI dev firm Vibetech exposed 13.7M records from past breaches
Security researcher Jeremiah Fowler found an unauthenticated database holding 13.7 million records drawn from previous data breaches and leaks, including names, phone numbers, email addresses, passwords and bank account details. The archive was sorted by company, with almost 8 million records tied to an AT&T leak plus Amazon (1.2 million), Walmart (420,000), BluBank Digital Bank (24,000), PayPal (18,000), the FBI Employee Directory (4,084) and Interpol (929). Fowler linked the database's IP address to a data intelligence platform operated or developed by Indian software development platform Vibetech, which he speculates was collecting breach datasets and accidentally left them public; after he notified the company and its hosting provider, the database was restricted, and a day later the IP showed an ISMS compliance platform dashboard instead.
Beyond the exposed credentials, the case shows how risk multiplies when organizations hoard breach data in repositories that are misconfigured.