WIKIFX REPORT: Online trading broker FBS exposes 20TB of data with 16 billion records

The team of security researchers at WizCase led by Ata Hakcil discovered a massive trove of data belonging to FBS, a prominent online trading broker with offices in Belize and Cyprus.

FBS is home to 16 million traders and 400,000 partners from over 190 countries.

Data exposed on an Elasticsearch server

According to researchers, FBS exposed almost 20 terabytes worth of data comprising over 16 billion records. As a result, millions of FBS customers had their personal and sensitive information accessible online.

It is worth noting that the data was left open to public access on an Elasticsearch server without any security authentication. This means that anyone with knowledge of unsecured databases could have downloaded the data with no password required.

What data was exposed？

The data, that was thoroughly analyzed by the WizCase team included:

• Country

• Addresses

• Full names

• IP addresses

• Email addresses

• Phone numbers

• Passport numbers

• Operating system

• Mobile device models

• Emails sent to FBS users

• Social media IDs including Facebook and Google