Exposed database reveals 7.5 million Adobe Creative Cloud accounts

Exposed database reveals 7.v meg Adobe Artistic Cloud accounts

Creative Cloud customers should be wary of emails asking them to log in to the service

Adobe Creative Cloud app on Android

Adobe left nearly 7.5 1000000 Creative Cloud accounts exposed to anyone with a web browser.

According to a Comparitech report, an Elastisearch database containing email accost and other Creative Cloud business relationship information was accessible without a password or other hallmark.

Comparitech partnered with security researcher Bob Diachenko to uncover the exposed database and reported it to Adobe on Oct 19th. Adobe secured the database the same day.

Diachenko estimates the database remained attainable for almost a calendar week. It's non clear if anyone else accessed the database.

Thankfully, Comparitech reports that the exposed data wasn't particularly sensitive. Below is a list of all data included in the database:

Electronic mail addresses
Account creation date
Which Adobe products that account owns
Subscription Status
Whether the user is an Adobe employee
Member IDs
Country
Time since last login
Payment status

The data didn't include payment data or passwords. However, the real danger with the exposed data is that scammers could use it to build targeted phishing scams.

Armed with the above data, fraudsters could pose every bit Adobe and effort to flim-flam users into giving up further data, such as passwords or payment details.

Adobe confirmed the details of the Comparitech written report to Gizmodo in an email statement. Information technology noted that the database "contained Artistic Cloud customer information, including electronic mail addresses, only did non include any passwords or financial information."

"This issue was not continued to, nor did it touch, the operation of any Adobe core products or services," the visitor said.

Adobe likewise said information technology was reviewing its "development processes to assist preclude a similar outcome occurring in the futurity."

Adobe Artistic Cloud users should be wary of whatsoever emails they receive request them to log in to the service and never click links provided in an electronic mail. Instead, open a new tab and sign in to Adobe directly through the company's website.

You can larn more most the breach and how Comparitech uncovered it here.

Source: Comparitech Via: Gizmodo