A small roundup of leak or transgress reports from various sources and places in the world… Pakistan Bykea, a Pakistani vehicle-for-hire and parcel bringing companionship was found leaking its production server with more than 200GB of data containing more than 400 million records. Exposed customer PII included names, phone numbers, and email addresses, while Bykea drivers’ PII included names, phone numbers, addresses, CNIC (Computerized national Identity Card), driver’s license numbers with issuing city and expiration dates, and body temperature. Read more on SafetyDetectives. Iran bobber Diachenko tweeted that an iranian entity, Raychat, leaked its entire database (267M+ accounts with names, emails, passwords, metadata, encrypted chats). The decibel was subsequently destroyed by a bot attack. Raychat (@Raychat_io), popular iranian concern and social messenger, exposed its entire database (267M+ accounts w/ names, emails, passwords, metadata, encrypted chats etc.). decibel is now destroyed by bot attack. No answer from the company. pic.twitter.com/rC4Uvm2U97 bob Diachenko (@MayhemDayOne) january 31, 2021 In a follow-up tweet, bob explained that there were multiple accounts for many users, plus a lot of bot accounts: total number of records in the exposed “users” collection: 267,278,794. It seems that there are multiple accounts created by the same users, plus a bunch of automated bot accounts, due to the nature of Raychat services. More details to come as soon as the database is secured. https://t.co/Ly6fE7vv70 bob Diachenko (@MayhemDayOne) january 31, 2021 india CloudSEK reports that they found a post advertising a police exam database exposing 500K Indian citizens PII. Their “discoveries” are basically searching sites like RaidForum to chance posts offer data that may relate to previously unpublicized leaks or hacks. That aside, there’s a legitimate query as to where these data came from, who was responsible for the database, and whether they even knew there was a leak or breach. CloudSEK’s analysis of the sample data provided suggests to them that “the common denominators of a significant amount of the sample data are Bihar (wedistrict) and 22 December 2019 (wedate). This points to the candidates of the preliminary examination conducted by Bihar police subordinate Services commission (BPSSC) for the post of sub Inspector/ Sergeant/ Assistant superintendent clink / Assistant Superintendent Jail, on 22 December 2019.” They manage not mention whether they reached out to the BPSSC to confirm their guess.