“He was also kind enough to lie and claim “There were few more security layers which would have made any data breach impossible anyway.” and only basic information such as database sizes was exposed.”
A compliance software company left 2.9 million records exposed for over two months, including password hashes and driver’s licenses. The server went offline within an hour of the researcher’s email. The CEO claimed only database sizes leaked. He also accused the researcher of harassment.