A Dow Jones watchlist containing records of individuals who are of interest to financial companies due to their potential high risk as customers has been leaked online. Prominent security researcher Bob Diachenko found a public Elasticsearch cluster containing the sensitive records of these individuals, brought together in a list compiled by Dow Jones, on February 22, 2019. The cluster contained a database which was open to any member of the public who is able to use an IoT search engine — such as BinaryEdge or Shodan which is able to list publicly-available, unsecured, front-facing systems — to peruse at will.
Source: ZDNet
