Robocall Legal Advocate Leaks Customer Data
Summary: The Blacklist Alliance, a California firm that sells list-scrubbing services to telemarketers trying to avoid Telephone Consumer Protection Act lawsuits, left its website directory open to anyone with a browser until late last week. The exposed data included thousands of documents and images, all 388 customer API keys, and customer phone numbers, employers, usernames and MD5-hashed passwords, plus mobile numbers tied to people who had hired lawyers to sue telemarketers.
What's compelling: The leak exposed the contact data of TCPA plaintiffs that lawyers had deliberately redacted from court filings to protect them from retaliation, and it also handed out 388 customer API keys and weakly hashed passwords for the marketing firms that bought the service.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026