Today we invite you to examine two recent major data leaks, exposing the details on hundreds of thousands of individuals.

Let's start with an incident that happened at a landmark in Singapore. Representatives of Marina Bay Sands (MBS), the resort at Marina Bay, Singapore, has notified members of its Sands LifeStyle loyalty program that their personal information has been compromised.

The incident affected about 665,000 organization’s customers. According to the MBS officials, suspicious activity was first noticed on 20 October and an investigation was launched. During the investigation, it became known that a third party had accessed the data of loyalty program members.

The following information is believed to be compromised in the incident:

• Full names
• Emails
• Phone numbers
• Countries of residence
• Sands LifeStyle membership numbers and tiers.

An MBS spokesperson said the organization is currently actively investigating the incident and has already reported it to the authorities.

World-in-HD (WiHD), a private French torrent tracker specializing in HD movies and TV, has suffered a leak of user and administration data. The leak is believed to have been caused by a database misconfiguration.

According to Cybernews, the research group that discovered the leak, the incident exposed information on 97,327 accounts belonging to users and administrators of the service. The data was stored in an Elasticsearch cluster on WiHD that was not password protected. 

Disclosed personal information includes:

• Emails
• IP addresses
• Usernames
• Hashed passwords.

It is claimed, the company had already fixed the vulnerability.

However, it is not known yet whether or not the disclosed data has been pre-loaded by threat actors for further use.

We have previously reported cases of sensitive information being exposed due to database vulnerabilities, such as the Redcliffe Labs data leak and the LADBible group incident.