cloud

7 Million+ Adobe Creative Cloud Account Data Exposed From Unauthentic Database To Hackers

More than 7 million Adobe Creative Cloud account user data has been exposed form an unauthenticated Elasticsearch database.

Adobe Creative Cloud is a set of applications and services from Adobe Systems that gives subscribers access to a collection of software used for graphic design, video editing, web development, along with a set of mobile applications and also some optional cloud services. 

The exposed details contain sensitive information such as,

  • Time since the last login
  • Account creation date
  • Subscription status
  • Member IDs
  • Payment status
  • Which Adobe products they use
  • Whether the user is an Adobe employee
  • Country
  • Subscription status

Security researcher Bob Diachenko uncovered the publically available database, the database has no password authentication and can be accessed by one by just having the link associated.

The exposure was notified to Adobe on October 19 and the same day the company secured the database.

The researcher said that we do not know when, exactly, the database first appeared, or anyone gained unauthorized access to the database but Diachenko estimates it was exposed for about a week.

The exposed database doesn’t include any credit cards or other payment information, so chances for direct financial or security threats, reads the report.

There is no credit card data involved in this leak but the leaked information could be used against Adobe Creative Cloud users in targeted phishing emails and scams.

Cyber Security New recently reported another data leak from the US Government, Military, and Department of Homeland Security (DHS) data exposed from the Elasticsearch database that belongs to the reservations management system Autoclerk.

You can follow us on LinkedinTwitterFacebook for daily Cyber security and hacking news updates.

Guru Baran

Gurubaran KS is a cybersecurity analyst, and Journalist with a strong focus on emerging threats and digital defense strategies. He is the Co-Founder and Editor-in-Chief of Cyber Security News, where he leads editorial coverage on global cybersecurity developments.

Recent Posts

Hackers Target AI Infrastructure With RCE, Prompt Injection and API Key Theft

Hackers are actively probing AI systems, turning exposed gateways and agent tools into routes for…

2 hours ago

Hackers Make Phishing Pages Change Their Code Every Time Someone Opens Them

Hackers are making some phishing pages harder to track by changing the code delivered to…

3 hours ago

Iran-Linked Hackers Reportedly Knock UK Power Plant Offline for Four Days

A cyber incident reportedly forced a British power plant to halt operations for about four…

4 hours ago

Russian Hackers Use New HOOKEDGE Malware to Spy on European Defense and Diplomatic Targets

Russian hackers have used a new backdoor called HOOKEDGE to target defense manufacturers, government bodies,…

4 hours ago

Ransomware Gang Claims AI Can Analyze 700GB of Stolen Data Every Hour

TITAN ransomware is pairing file encryption with an ambitious claim: artificial intelligence that can sort…

4 hours ago

Hackers Compromise Hundreds of WordPress Sites to Deploy Amatera Stealer via ClickFix

A fake student resume is being used to place a remote-access tool on researchers’ Windows…

6 hours ago