SaverSpy.com
| Primary URL | Location | Industry | saverspy[.]com |
Country
United States of America
|
Technology
|
|---|
Profile
SaverSpy.com operates under the alias SaverSpy.com. Its headquarters is located in the United States of America. The organization provides an email marketing service. This service handles the collection and distribution of user data for marketing campaigns. The email marketing platform is associated with the data exposed in the 2018 security incident.
On September 17, 2018, an unsecured MongoDB server linked to SaverSpy.com's email marketing service was discovered. The server exposed nearly 11 million user records. The exposed records contained names, email addresses, physical locations, and email delivery data. In addition to personal details, the breach included Yahoo-specific email addresses and DNS information. The number of exposed records indicates a large volume of data managed by the service.
Prior to the 2018 leak, evidence suggested the same MongoDB database had been compromised in a ransomware campaign where attackers wiped data and demanded Bitcoin payments. Security researchers identified the exposed server and notified SaverSpy.com about the leak. Following the notification, the company secured the MongoDB server to prevent further unauthorized access. The incident highlighted inadequate security measures despite the earlier compromise. After the initial attacks, the database was restored without implementing proper safeguards, leaving it vulnerable to the later exposure.