13 Million Mac Keeper Users Exposed
Summary: Kromtech, the maker of MacKeeper, acknowledged a breach that exposed usernames, passwords and other data on more than 13 million customers after researcher Chris Vickery found a 21 GB MongoDB database open to the internet with no authentication. Vickery located it by searching Shodan for servers listening on port 27017, and Kromtech said it closed public access within hours, that payment data was handled by a third-party merchant, and that only Vickery accessed the data.
What you should know: The exposed records included password hashes stored with MD5 and no salt, and Vickery disputed Kromtech's claim that a misconfiguration introduced the prior week caused it, citing Shodan records dated mid-November 2015. A 21 GB database holding credentials for 13 million users sat reachable by anyone who ran the same Shodan query.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026