Slashdot Mirror
Urban Massage Data Breach Exposed Sensitive Comments On Its Creepy Clients (techcrunch.com)
An anonymous reader shares a report from TechCrunch: Urban Massage, a popular massage startup that bills itself as providing "wellness that comes to you," has leaked its entire customer database. The London, U.K.-based startup -- now known as just Urban -- left its Google-hosted ElasticSearch database online without a password, allowing anyone to read hundreds of thousands of customer and staff records. Anyone who knew where to look could access, edit or delete the database. It's not known how long the database was exposed or if anyone else had accessed or obtained the database before it was pulled. It's believed that the database was exposed for at least a few weeks.
Urban pulled the database offline after TechCrunch reached out. Among the records included thousands of complaints from workers about their clients. The records included specific complaints -- from account blocks for fraudulent behavior, abuse of the referral system and persistent cancelers. But, many records also included allegations of sexual misconduct by clients -- such as asking for "massage in genital area" and requesting "sexual services from therapist." Others were marked as "dangerous," while others were blocked due to "police enquiries." Each complaint included a customer's personally identifiable information -- including their name, address and postcode and phone number.
Urban pulled the database offline after TechCrunch reached out. Among the records included thousands of complaints from workers about their clients. The records included specific complaints -- from account blocks for fraudulent behavior, abuse of the referral system and persistent cancelers. But, many records also included allegations of sexual misconduct by clients -- such as asking for "massage in genital area" and requesting "sexual services from therapist." Others were marked as "dangerous," while others were blocked due to "police enquiries." Each complaint included a customer's personally identifiable information -- including their name, address and postcode and phone number.
That's really all there is to it.
Oh and don't expose data stores without security to the internet (bonus points for using security, like what Elastic provides).
Happy ending? Unlikely.
Who's going to jail for this? Oh ya, read the ULA
Where's the list of clients who asked for sexual favours?
Comment removed based on user account deletion
Whitey on the Moon
Gil Scott-Heron
====
A rat done bit my sister Nell.
(with Whitey on the moon)
Her face and arms began to swell.
(and Whitey's on the moon)
I can't pay no doctor bill.
(but Whitey's on the moon)
Ten years from now I'll be payin' still.
(while Whitey's on the moon)
The man jus' upped my rent las' night.
('cause Whitey's on the moon)
No hot water, no toilets, no lights.
(but Whitey's on the moon)
I wonder why he's uppi' me?
('cause Whitey's on the moon?)
I was already payin' 'im fifty a week.
(with Whitey on the moon)
Taxes takin' my whole damn check,
Junkies makin' me a nervous wreck,
The price of food is goin' up,
An' as if all that shit wasn't enough
A rat done bit my sister Nell.
(with Whitey on the moon)
Her face an' arm began to swell.
(but Whitey's on the moon)
Was all that money I made las' year
(for Whitey on the moon?)
How come there ain't no money here?
(Hm! Whitey's on the moon)
Y'know I jus' 'bout had my fill
(of Whitey on the moon)
I think I'll sen' these doctor bills,
Airmail special
(to Whitey on the moon)
===
Songwriters: GIL SCOTT-HERON
© CARLIN AMERICA INC
For non-commercial use only.
The groper is far creepier than the gropee.
Who are the creepy employees?
'Massage' businesses are usually run by LEAs. Run like hell.
You named your business "urban massage", what do you expect? It's like naming your cookware store "Stoner's Pot Palace" and wonder why this happens.
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
ICQ had a mode that did the same thing 20 years ago.
In a world of the blind, the one-eyed man is king--and the two-eyed man is a heretic.
What the fuck is "creepy" about the clients? They wanted a fucking massage. What's "creepy" about that? Hey, it's not for me, but, if someone gets satisfaction from having someone else massage their body, what is "creepy" about that?
Fucking goddamn femi-sjw-maga-fagas! Fuck off! Take your "creepy" and fucking kill yourself you worthless goddamn pieces of shit!