Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

DonViejo

(60,536 posts)
Tue Oct 3, 2017, 06:10 PM Oct 2017

NFL Data Breach: Personal Information Of 1,200 Players Exposed

Source: International Business Times




BY AJ DELLINGER ON 10/03/17 AT 4:25 PM

The personal information of more than 1,100 NFL players, including controversial free agent quarterback Colin Kaepernick, was left exposed in an unsecured and publicly accessible database, according to security researchers.

Included in the information, which was hosted in an open Elasticsearch database hosted on a server for NFLPA.com—the website for the NFL Players Association (NFLPA)—was contact information for more than 1,133 NFL players and their agents.

The email addresses, mobile phone numbers, home addresses of agents and players and IP addresses associated with a user when they sign in and access the site were all logged and stored in the exposed database that could be accessed by anyone who knew or came across the URL where it was hosted.

In total, 1,262 email accounts for players and agents were leaked, including 75 email addresses linked to the NFLPA. Information about advisor fee percentages were also included in the database, along with 26,271 IP addresses associated with logins from players and agents.






Read more: http://www.ibtimes.com/nfl-data-breach-personal-information-1200-players-exposed-2596927

10 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies
NFL Data Breach: Personal Information Of 1,200 Players Exposed (Original Post) DonViejo Oct 2017 OP
I don't understand what kind of database that was. Who put that info in that database? And why? nt Honeycombe8 Oct 2017 #1
Elasticsearch is a nice, fast nosql database benh57 Oct 2017 #10
Gee. What odd timing. C Moon Oct 2017 #2
Suspicious ChazInAz Oct 2017 #8
Even with an iwatch, that data ain't gonna help my hapless team Brother Buzz Oct 2017 #3
These unsecured databases on the Internet are getting too common. defacto7 Oct 2017 #4
NFL players have a bad case of the Mondays. AngryAmish Oct 2017 #5
This is what is known as fighting dirty. n/t radicalliberal Oct 2017 #6
My first thought.. FarPoint Oct 2017 #7
That's a helluva coincidence rockfordfile Oct 2017 #9

benh57

(141 posts)
10. Elasticsearch is a nice, fast nosql database
Wed Oct 4, 2017, 04:57 AM
Oct 2017

I've used it at several companies. Usually for aggregating server log data. The mention that it contained IP addresses tells me it may have been a logstash instance. They may have used it for indexing other sets of data too as the backend for one of their applications.

https://www.elastic.co/

C Moon

(12,213 posts)
2. Gee. What odd timing.
Tue Oct 3, 2017, 06:30 PM
Oct 2017

All these data breaches lately, make me think it's related to the 2018 election somehow: getting s.s. #'s, addresses, phone #'s, etc
The GOP is probably scared right now because they aren't doing anything about a VERY unpopular thief who sits in the white house. Plus, the mystery behind what kind of information Mueller has.

defacto7

(13,485 posts)
4. These unsecured databases on the Internet are getting too common.
Tue Oct 3, 2017, 06:53 PM
Oct 2017

I'd imagine it's more than mere accidental oversight. It's starting to show a pattern.

Latest Discussions»Latest Breaking News»NFL Data Breach: Personal...