Post #2113056

2025-10-31 14:27 UTC

Remember that frustrating situation where some of us couldn't get a vendor to respond to notifications that court-sealed records and sensitive files were exposed? One entity eventually reached the vendor by phone and was so angry at their response that they wound up canceling their account with them. Yesterday, I finally reached the second court entity. They, too, wound up telling the vendor to take the share down. How many other clients may still have exposed data because the vendor tells clients that everything's fine when it isn't? I don't know. If you know any entity using Software Unlimited Corp software (not Software Unlimited Inc, but Software Unlimited CORP), you may want to point them to my coverage: Original Report: https://databreaches.net/2025/10/13/months-after-being-notified-a-software-vendor-is-still-exposing-confidential-and-sealed-court-records/ Today's Update: https://databreaches.net/2025/10/31/how-many-courts-have-had-sealed-and-sensitive-files-exposed-by-one-vendors-error/ #dataleak #vendor #incidentresponse #cybersecurity #SoftwareUnlimitedCorp #FTC #govsec @zackwhittaker @euroinfosec @campuscodi @JayeLTee

Replies (2)

@ShadowJonathan@tech.lgbt 2025-10-31 15:00

@PogoWasRight@infosec.exchange @zackwhittaker@mastodon.social @euroinfosec@infosec.exchange @campuscodi@mastodon.social @JayeLTee@infosec.exchange holy fucking shit, that is a level of incompetence and ignorance i have literally never envisioned would be possible - legal data, HIGHLY confidential - public share on a PUBLIC IP (not even behind a VPN, or another mechanism) - weak protection - evasive behaviour when finding out about these shares - ignorance, blockading, direct dismissal, and INSTRUCTING OTHER PARTIES TO DISMISS CONCERNS - not listening when clients request their data to be deleted(!) this company is just ASKING to get a fucking legal case filed against THEM, jesus fucking christ im just thinking that that company lost or fired their sysadmin/programmers, and now are just flying based on what they have, and just "let the problem go away" when someone complains, and that being good enough for not-tech-savvy users jesus fucking christ

Open ##2867986
@maxbarnash@mastodon.social 2025-10-31 15:09

@PogoWasRight@infosec.exchange SUCO’s handling of this is beyond the pale. Thank you & researchers for your work, I cannot imagine how frustrating it must have been.

Open ##2867987