a small roundup of leak or breach reports from various sources and places in the world… Pakistan Bykea, a Pakistani vehicle-for-hire and portion delivery company was found leaking its production server with more than 200GB of data containing more than 400 million records. Exposed customer PII included names, phone numbers, and email addresses, while Bykea drivers’ PII included names, phone numbers, addresses, CNIC (Computerized national indistinguishability Card), driver’s permission numbers with issuing city and termination dates, and body temperature. scan more on SafetyDetectives. Iran bob Diachenko tweeted that an iranian entity, Raychat, leaked its entire database (267M+ accounts with names, emails, passwords, metadata, encrypted chats). The decibel was subsequently destroyed by a bot attack. Raychat (@Raychat_io), popular iranian business and social messenger, exposed its entire database (267M+ accounts w/ names, emails, passwords, metadata, encrypted chats etc.). DB is now destroyed by bot attack. no reception from the company. pic.twitter.com/rC4Uvm2U97 bob Diachenko (@MayhemDayOne) January 31, 2021 In a followup tweet, bob explained that there were multiple accounts for many users, plus a lot of bot accounts: tally number of records in the exposed “users” collection: 267,278,794. It seems that there are multiple accounts created by the same users, plus a lot of automated bot accounts, due to the nature of Raychat services. More details to amount as soon as the database is secured. https://t.co/Ly6fE7vv70 cork Diachenko (@MayhemDayOne) january 31, 2021 india CloudSEK reports that they found a stake advertising a constabulary exam database exposing 500K indian citizens PII. Their “discoveries” are basically searching sites like RaidForum to find posts offering data that may relate to previously unpublicized leaks or hacks. That aside, there’s a legitimate query as to where these data came from, who was responsible for the database, and whether they even knew there was a leak or breach. CloudSEK’s analysis of the sample data provided suggests to them that “the common denominators of a significant total of the sample data are Bihar (wedistrict) and 22 december 2019 (wedate). This points to the candidates of the overture exam conducted by Bihar constabulary subordinate Services direction (BPSSC) for the carry of sub Inspector/ Sergeant/ help Superintendent jail / Assistant Superintendent Jail, on 22 December 2019.” They do not advert whether they reached out to the BPSSC to confirm their guess.