Vibetech Database Exposes 13.7M Records Including AT&T and FBI Data

Vibetech left a database containing 13.7 million sensitive records publicly accessible without authentication, including plaintext passwords and bank details sourced from prior breaches. The root failure was a fundamental misconfiguration — the database was never secured before being exposed to the internet. Storing plaintext passwords compounds the risk dramatically, as those credentials can be immediately weaponized in credential-stuffing attacks. This incident highlights how aggregated breach data becomes a high-value, high-risk asset that demands even stricter controls than typical operational data. The fact that a responsible disclosure was required to trigger remediation indicates an absence of proactive monitoring and asset visibility.