Reputation.com, a US-based provider of online reputation management (ORM) and customer experience (CX) tools, exposed a massive unsecured database containing 320GB of logs with nearly 120 million records on the public internet. The logs included cookies, timestamps, unique identifiers, and backend system data, posing a severe risk of account takeovers for major brands (including Fortune 500 companies like US Bank, Ford, GM, and BMW dealerships). The exposed data—organized in monthly indices—revealed user and application interactions, tracking information, and analytics, enabling potential attackers to exploit vulnerabilities in customer accounts. Despite multiple alerts from Cybernews researchers, the database remained publicly accessible, amplifying threats of fraud, unauthorized access, and reputational damage for hundreds of prominent brands relying on Reputation.com’s platform. The incident highlights critical lapses in data security, with sensitive log data left unprotected for an extended period.