Education app reveals users’ sensitive information, research finds

8Belts, a maker of language-learning apps, leaked sensitive personal information on hundreds of thousands of users around the world from an unsecured cloud database, researchers said in a report Friday. The information included national identity numbers, as well as names, email addresses and phone numbers.

The database was accessible to anyone who had the right IP address, since at least April 15 when researchers Noam Rotem and Ran Locar encountered it online as part of a project that discovers database exposures on the internet. The researchers published their findings with vpnMentor, a website that reviews virtual private networks and earns commissions when readers click its links and purchase products. The earliest records in the 8Belts database, which has since been taken offline, were from 2017.

MORE: https://www.cnet.com/news/education-app-reveals-users-sensitive-information-research-finds/