7.5 million Creative Cloud user profiles leaked

There is yet another well-known technology company that has trouble related to user privacy. This time, Adobe accidentally leaked about 7.5 million user records after 'accidentally' storing this Creative Cloud data on an insecure server.

As a result, security researcher Bob Diachenko, along with Comparitech's expert team, discovered that Adobe left users' data on a publicly accessible server. More specifically, researchers have found an insecure Elaticsearch database that contains data from the 'vast number' of Adobe Creative Cloud users. This means that anyone with access to the internet can easily view the data without facing any authentication requests.

The unprotected server contains about 7.5 million records of Adobe Creative Cloud users. Data includes personal information such as email address, member ID, country, account creation date, registration status, payment status, Adobe product in use and time since login. final. There is also information about whether or not the user is an Adobe employee.

7.5 million Creative Cloud user profiles leaked Picture 1

The good news for both Adobe and Adobe Creative Cloud users is that a leaked data warehouse does not include some confidential personal information such as financial data or passwords.

Shortly after the discovery of the insecure database on October 19, 2019, the team immediately notified the situation to Adobe. The company has also quickly implemented the necessary security measures.

However, Diachenko estimates that the database has been publicly accessible for about a week, so it is possible for the above information to fall into the wrong hands. Furthermore, Adobe has not been able to confirm whether the database was retrieved during that time.

In fact, the data warehouse does not contain any sensitive information about the user, such as account passwords, bank data or credit card details. However, the range of leaked information still poses many threats of phishing attacks to users. Therefore, users of Adobe Creative Cloud must be extremely careful if they receive any emails impersonating Adobe asking for passwords or sensitive data.