Home / Technology / Millions of User Records Leaked in FTF Live Breach
Millions of User Records Leaked in FTF Live Breach
3 Jun
Summary
- Millions of user records, including session data, usernames, and emails, were exposed.
- Sensitive metadata like device, payment, and location information was compromised.
- Unsecured dashboards and log viewers led to the significant security lapse.
A major cybersecurity lapse has potentially compromised millions of users on the FTF Live video chat platform. Researchers discovered an openly accessible Kibana dashboard, leading to the exposure of 22 million session records and 3.47 million identifiable user details, including usernames and email addresses. This breach occurred due to a misconfiguration on the platform.
Beyond basic identifiers, the leak also included sensitive metadata such as device information, gender, payment details, and geolocation data like IP addresses and country. An unsecured Dozzle log viewer further exposed backend logs, revealing plain-text passwords, session tokens, and internal API requests.
Researchers expressed concern over the lack of response from the company, which has a complex ownership structure involving Burhan LTD, Cooy Ads Ltd, and Pixover. The platform, often used for intimate conversations, now leaves users, including vulnerable groups, exposed to risks like account compromise, scams, and stalking.
