Post #2113062

Promises, promises. Exclusive: Brosix and Chatox promised to keep your chats secured. They didn’t. A researcher found a misconfigured backup with -- yes, you guessed it -- everything in plaintext instead of encrypted. Some entities that used the service are medical entities that were actually mentioning protected health information or attaching files with #PHI in the chat. There were almost 5k Allstate employees using the service and sharing customer #PII in files. And oh yeah, I found one company gossiping about me and plotting against me after I notified them they were leaking tons of #PHI. I've done them a favor by not publishing all their chat logs about me. :) There also appeared to be some "dodgy" stuff on the backup, too. Read the details about the exposed backup in my post at https://databreaches.net/2025/08/05/exclusive-brosix-and-chatox-promised-to-keep-your-chats-secured-they-didnt/ #infosec #encryption #databreach #incidentresponse #chatox #brosix #dataleak @zackwhittaker