Quiz App TVSmiles Exposed Account Details for Millions of Users

Security analyst from UpGuard detected the public Amazon S3 bucket, which contained successive versions of applications relevant to TVSmiles mobile phone app and one 306 gigabyte database backup file from 2017. Among the 261 database tables present, the “core_users” table consists of over 6.6 million rows. Of the entries containing an email address, 901,000 are unique.  The publicly accessible storage bucket contained a 306 GB PostgreSQL database backup with unencrypted PII matched to individual users, profiling insights about users’ interests based on quiz responses.