Data Breach at Senior Advisor Exposes Millions of Senior Citizens' Personal Information

  • By Dawna M. Roberts
  • Published: Sep 16, 2021
  • Last Updated: Mar 18, 2022


InfoSecurity Magazine reported this week that security researchers found an unsecured Amazon S3 bucket containing a database with millions of senior citizens' personal information exposed online.

What Happened?

WizCase first reported the incident that their threat research team led by Ata Hakcil discovered an Amazon S3 bucket owned by Senior Advisor, containing senior information online and unsecured. The bucket was named "leads."

The data breach contained more than three million people's information, including names, email addresses, phone numbers, and contact dates. Researchers uncovered a million files and 182GB of data. However, the data was unencrypted, and no password was required to access it. This type of Amazon S3 misconfiguration is responsible for various other data breaches.

According to InfoSecurity Magazine, "WizCase believes the files are from 2002-2013 based on the contact dates, although the files were timestamped in 2017."

"Additionally, the team found around 2000 "scrubbed" reviews in the misconfigured bucket, in which the user's sensitive information was wiped or redacted. However, the scrubbed reviews contained a lead ID that would enable a malicious actor to trace it back to the person who wrote it as the reviews and lead data were in the same exposed database."

How Did the Senior Advisor Respond?

Immediately upon discovering the data breach, WizCase contacted Senior Advisor to alert them. The company responded by securing the file; however, the damage could already be done.

Data Breach at Senior Advisor

According to WizCase,

"The greatest danger of this breach stems from the specific group of people left vulnerable. SeniorAdvisor is targeted toward senior citizens in or near retirement. In a  2018-2019 report, the FTC noted that people who filed a fraud complaint in the ages of 60-69 lost $600 per scam on average. The amount rose as the age group was older, culminating in $1700 on average per scam for people in the ages of 80-89."

Senior Citizens a Prime Target

Senior citizens are prime targets for cybercriminals because they are unaware of the dangers, are more trusting of strangers, and could be suffering from memory loss or other physical or mental issues.

Spear phishing targets specific groups of people, and hackers use this type of attack to ensnare seniors in various kinds of scams. Armed with someone's name, email address, and phone number along with their age (which can be determined easily online), a scammer could easily trick an older adult out of money, credit card or bank details, or login credentials for other accounts. Seniors also often have substantial savings from a lifetime of working making them attractive targets.

Some of the most popular scams perpetrated against seniors include:

  • Healthcare/Medicare/Insurance fraud.
  • Charity scams.
  • Reverse mortgage schemes.
  • Phishing emails about Covid or counterfeit prescription drugs.
  • Lottery scams.
  • Grandparent scam. 
  • Anti-aging products.
  • Social security fraud.

Above is just a sampling of the ways that criminals target seniors. The information breached by Senior Advisor could unleash a flood of different types of attacks targeting older Americans.

How Seniors Can Stay Safe

Some ways that senior citizens can stay safe after a data breach are:

  • Always use strong passwords for devices and online accounts.
  • Never share your credentials or personal information with anyone unsolicited.
  • Never reuse passwords on multiple accounts.
  • Do not click links or download attachments that come through email.
  • Always verify the sender of an email before taking any action.
  • Remember that thieves will try and do anything to get you to hand over details.
  • Protect your personally identifiable information (like your social security number, driver's license, etc.) at all costs.
About the Author
IDStrong Logo

Related Articles

Instagram Vulnerability Allowed Hackers Access to Control Your Phone

Security experts Check Point Research discovered a critical vulnerability while examining Instagra ... Read More

Alien Malware Infects More than 226 Mobile Apps and Steals Bank Data

As reported on September 24, 2020, by ZDNet and ThreatPost, a new strain of malware named “A ... Read More

Universal Health Systems Hit by Ransomware Attack

Universal Health Systems (UHS), a Fortune 500 company owning more than 400 hospitals across the co ... Read More

Exchange Server Bug Exposes a Big Risk to Hackers

Months after Microsoft released a patch to fix a serious flaw in MS Exchange Server, more than 61% ... Read More

Clients’ Bank Data Exposed in Blackbaud Ransomware Attack

Blackbaud software was victim to a ransomware attack last May, and new information suggests that c ... Read More

Latest Articles

What to Do if Your Credit Card is Lost or Stolen

What to Do if Your Credit Card is Lost or Stolen

Credit and debit cards have become the most prominent form of wealth access in the last decade. Once consumers pulled out thick wallets of cash—they now pull out thin clips of cards—if they bother using a card, not a watch or cellphone.

Credit Card CVV Number: Meaning and Security

Credit Card CVV Number: Meaning and Security

Inspect your credit card, and you'll likely find interesting—and crucial—elements of the plastic rectangle. The front might display the provider's name, a chip, some digits, or an entire card number; the back might hold much the same, along with a signature, when necessary, and a "valid thru [sic]" date.

The Meaning of Two-Factor Authentication (2FA): How to Turn On and Turn Off

The Meaning of Two-Factor Authentication (2FA): How to Turn On and Turn Off

Cyber attacks are a growing threat to all industries, nations, and people. They occur with increasing frequency, with the last year reporting 3,205 data compromises and over $12.5 billion in projected losses, according to the Federal Bureau of Investigation (FBI).

Featured Articles

How to Buy a House with Bad Credit

How to Buy a House with Bad Credit

Buying your own home is the American Dream, but it might seem out of reach to those with bad credit. However, the good news is, if your credit is less than perfect, you do still have options and in most cases, can still buy a home.

How Secure Is Your Password? Tips to Improve Your Password Security

How Secure Is Your Password? Tips to Improve Your Password Security

Any good IT article on computers and network security will address the importance of strong, secure passwords. However, the challenge of good passwords is that most people have a hard time remembering them, so they use simple or obvious ones that pose a security risk.

Top 10 Senior Scams and How to Prevent Them

Top 10 Senior Scams and How to Prevent Them

Senior scams are becoming a major epidemic for two reasons. First, seniors often have a lot of money in the bank from a life of working hard and saving.

Free Identity Exposure Scan
Instantly and Securely Check if Your Personal Information is Exposed on the Dark Web or Sold by Data Brokers
Please enter first name
Please enter last name
Please select a state
Free Identity Threat Scan
Instantly Check if Your Personal Information is Exposed
All fields below are required
Please enter first name
Please enter last name
Please enter a city
Please select a state
Please enter an age
Please enter an email address