Industry News: ESG5

The Target: Lionsgate Play, a U.S based video-streaming platform.

The Take: Exposure of 30 Million records of User Data including: IP addresses, operating system, user search queries, and web browser information.

The Vector: A misconfigured Elasticsearch database was left open and unsecured, meaning anyone with an internet connection could have viewed and downloaded the data. 

This shows how important authentication controls are, and even more critically, that they be purposefully and smartly deployed with security in mind. Multi-factor authentication and password length and complexity rules on server access are effective strategies to mitigate these kinds of breaches to protect a firm’s data.

Read more...