“24% of Site owners fixed the misconfiguration”
Three researchers scanned 5.5 million domains for misconfigured Firebase and found about 125 million exposed user records, including 20 million passwords and 27 million billing records. One gambling network alone leaked 10 million plaintext passwords and 8 million bank logins. They sent 842 disclosure emails over 13 days. Three quarters of the site owners never fixed it, and two offered a bug bounty.