Anger amongst WWE wrestling fans is thought to be rife after revelations that up to three million fans’ account information has been left unprotected and accessible on the Amazon cloud.<\/p>\n
It’s thought that WWE is watched by 15 million fans each week in the U.S. alone. In 2016, they announced plans to expand to China, opening a potential fan base of 1.4 billion. It’s scary to think that an organisation as big as this and with so many fans could leave data belonging to three million people totally unsecured.<\/p>\n
It’s one heck of a monumental data breach…
\n<\/p>\n
According to Forbes, Bob Dyachenko from cyber-security firm Kromtech<\/em> said he discovered a “huge, unprotected WWE database” containing more than three million users’ personal information.<\/p>\n The data trove is thought to include names, home addresses, email addresses, educational backgrounds, earnings, ethnicities, dates of birth, customers’ children age ranges and gender. The data was discovered without username or password protection; i.e. without the most basic of cyber-security protection protocols.<\/p>\n Mr Dyachenko discovered two open and publicly accessible Amazon S3 Buckets that contained masses of information collected by third party agencies used for WWE marketing purposes. He goes on to say that an estimated 12% of all the information was set to ‘public access’ which means it’s readily available for the general public with internet access.<\/p>\n Anyone accessing the information could also download it.<\/p>\n Of the two databases, the first Amazon S3 Bucket contained a lot of emails in plain text with data thought to be from 2014 to 2015. The total amount of records is thought to amount to 3,065,805. This figure was checked by researchers for duplication, and the results showed they were unique.<\/p>\n The second Amazon S3 Bucket showed that around 12% – 15% of the data was partially set for public access. It contained a huge amount of marketing and customer data, including billing data, usernames and addresses. This database also contained information on hundreds of thousands European customers who had shopped at the online store from 2016.<\/p>\n There were also spreadsheets of WWE fans’ marketing preferences. This included social media tracking of the WWE social media accounts like YouTube, with weekly total of plays, likes, shares, comments and how to gauge fan interactions. This spreadsheet was broken down into countries, most likely for targeted marketing purposes.<\/p>\nPublic access<\/h3>\n
Two buckets of data found wide-open<\/h3>\n
Databases secured after a couple of hours<\/h3>\n