Massive Exposure: 40 Billion Records (13 TB) of Unencrypted Mail Logs Leaked by Netcore Cloud

Cybersecurity researcher Jeremiah Fowler has uncovered a massive data exposure involving Netcore Cloud Pvt. Ltd, a Mumbai-based marketing automation company that serves more than 6,500 brands in 40 countries. The unencrypted and non-password-protected database, totalling 13.41 TB, contained sensitive information including bank notifications, healthcare communications, account verification messages, and employment-related emails. “The publicly exposed database was not password-protected or encrypted.

It contained 40,089,928,683 records totaling 13.41 TB,” Fowler wrote in his report, noting the records appeared to be mail logs containing email addresses, message subjects, IP addresses, SMTP details, and other potentially sensitive data. In his limited sample analysis, Fowler found detailed bank activity notifications with partial account numbers and references to specific transactions, with some records marked confidential, and notifications linked to healthcare systems.

The data appeared to originate from Netcore Cloud’s marketing infrastructure, and while no evidence suggested the data was downloaded by malicious actors, the exposure raises serious privacy and security concerns, including a large attack surface due to an IP address with 89 open ports.