Database with Millions of SMS Texts exposed

A massive database storing tens of millions of SMS text messages, most of which were sent by businesses to potential customers, has been found online.

Over 10 million SMS, mostly businesses to potential customers, has been found online in a database that is run by TrueDialog. TrueDialog is a business SMS provider for businesses and higher education providers, and it helps businesses and educational institutions send bulk text messages to their customers and students, with even two-way communications, as the recipients can also send them replies.

The database stored years of sent and received text messages from its customers and processed by TrueDialog. But because the database was left unprotected on the internet without a password, none of the data was encrypted and anyone could look inside.

The database contained information about university finance applications, marketing messages from businesses with discount codes, and job alerts, among other things.

But the data also contained sensitive text messages, such as two-factor codes and other security messages, which may have allowed anyone viewing the data to gain access to a person’s online accounts. Many of the messages we reviewed contained codes to access online medical services to obtain, and password reset and login codes for sites including Facebook and Google accounts.