Tetrad Database Misconfiguration Exposes 120 Million Americans
Bill Toulas | February 21, 2020
The market analysis giant Tetrad has misconfigured an Amazon S3 bucket containing the details of 120 million Americans, enabling anyone with a browser to access it and download the contained files. This is precisely what an UpGuard researcher did on February 3, 2020, finding three large files totaling a size of 747 gigabytes. The data appeared to derive from Tetrad’s clients, while some sets were collected by the firm for their account. Tetrad has a clientele coming from retail, restaurants, commercial real estate, healthcare, banking & finance, and more, so the range of the data exposed is pretty wide. The researcher contacted the firm repeatedly, and they finally secured the database on February 10. In this vast trove of data, there was a subset labeled with the “Experian Mosaic” tag, which contained the data of 120 million American households. The information populating each entry of this set includes the name (or names) of the head(s) of the household, their gender, the physical home address, and a Mosaic group ID code.