WIKIFX REPORT: Online trading broker FBS exposes 20TB of data with 16 billion records

FBS | 2022-06-27 16:23

Abstract：The leaked data also included unredacted credit cards and passports of millions of users around the world.

trading-firm-fbs-exposes-20tb-of-data-with-over-16-billion-records-4.jpg

" />

The leaked data also included unredacted credit cards and passports of millions of users around the world.

The team of security researchers at WizCase led by Ata Hakcil discovered a massive trove of data belonging to FBS, a prominent online trading broker with offices in Belize and Cyprus.

FBS is home to 16 million traders and 400,000 partners from over 190 countries.

Data exposed on an Elasticsearch server

According to researchers, FBS exposed almost 20 terabytes worth of data comprising over 16 billion records. As a result, millions of FBS customers had their personal and sensitive information accessible online.

It is worth noting that the data was left open to public access on an Elasticsearch server without any security authentication. This means that anyone with knowledge of unsecured databases could have downloaded the data with no password required.

What data was exposed？

The data, that was thoroughly analyzed by the WizCase team included:

Country
Addresses
Full names
IP addresses
Email addresses
Phone numbers
Passport numbers
Operating system
Mobile device models
Emails sent to FBS users
Social media IDs including Facebook and Google

Whats worse is that the company also exposed files sent by users for account verification or identity confirmation. This included the following:

Personal photos
Drivers licenses
Birth certificates
Bank statements
National ID cards
Unredacted credit cards

The fact that FBS uploaded unredacted credit cards on a web server and left them exposed for public access could have a devastating impact on unsuspecting users including empty bank account, identity theft, extortion, and blackmailing scams to name a few.

However, the list of exposed data does not end here. In their blog post, Chase Williams of WizCase wrote that FBS also exposed its users IDs, their login history, unencrypted passwords encoded in base64, links to reset the password, and other sensitive information.

Broker Dealer Forex trading Forex Broker Forex news

Related broker

Website：http://fbs.com/

5-10 years | Regulated in Australia | Regulated in Cyprus | Regulated in Belize

Score

7.70

Warning Against Globalmarketsbull & Cryptclubmarket

Are you thinking about investing in Globalmarketsbull or Cryptoclubmarket? Think again! The Financial Conduct Authority (FCA) issued a warning about these two firms. Here are the details of these unlicensed brokers.

Original 2024-11-16 08:30

Why Even the Highly Educated Fall Victim to Investment Scams?

Understanding why educated individuals fall victim to scams serves as a stark reminder for all traders to remain vigilant, exercise due diligence, and keep emotions firmly in check.

Original 2024-11-16 08:00

WikiFX Broker Assessment Series | Lirunex: Is It Trustworthy?

In this article, we will conduct a comprehensive examination of Lirunex, delving into its key features, fees, safety measures, deposit and withdrawal options, trading platform, and customer service. WikiFX endeavours to provide you with the essential information required to make an informed decision about utilizing this platform.

Original 2024-11-15 17:45

Italy’s CONSOB Blocks Seven Unregistered Financial Websites

Italy’s CONSOB ordered seven unauthorized investment websites blocked, urging investors to exercise caution to avoid fraud. Learn more about their latest actions.

Original 2024-11-15 15:48