Cybersecurity researcher Jeremiah Fowler discovered a major data leak at IMDataCenter, exposing a 38GB database with 10,820 records containing personally identifiable information (PII) such as names, addresses, phone numbers, email addresses, lifestyle details, and vehicle ownership. The data was left unprotected on the internet, posing significant risks for identity theft and fraud. Additionally, a hacker known as ThinkingOne accessed IMDataCenter’s AWS bucket, downloading 40GB of data, including 20 million email addresses, 37 million phone numbers, and sensitive details like Social Security Numbers. The breach affects clients across healthcare, airlines, universities, and other sectors, with the data already downloaded by at least one third party.