More than 890 GB of information containing private details and web activity of approximately 1 million users was exposed. The log data of online activities was compromised by Conor, a South African IT company.

The ISP’s database was kept unencrypted because the provider used a web filtering application developed by Conor. The company didn’t manage to ensure security of the data comprising sensitive information including personally identifying records which could be easily correlated with browsing history details among which there was adult content.

vpnMentor's researchers discovered the database on November 12. Many details appeared to be exposed: from websites visited by users to IP addresses and the amount of information transferred per session as well as the content blocking rules and filter functioning.

Conor has clients and representation in many countries of Africa and South America.