Data Breach at Senior Advisor Exposes Millions of Senior Citizens' Personal Information

  • By Dawna M. Roberts
  • Published: Sep 16, 2021
  • Last Updated: Mar 18, 2022

 

InfoSecurity Magazine reported this week that security researchers found an unsecured Amazon S3 bucket containing a database with millions of senior citizens' personal information exposed online.

What Happened?

WizCase first reported the incident that their threat research team led by Ata Hakcil discovered an Amazon S3 bucket owned by Senior Advisor, containing senior information online and unsecured. The bucket was named "leads."

The data breach contained more than three million people's information, including names, email addresses, phone numbers, and contact dates. Researchers uncovered a million files and 182GB of data. However, the data was unencrypted, and no password was required to access it. This type of Amazon S3 misconfiguration is responsible for various other data breaches.

According to InfoSecurity Magazine, "WizCase believes the files are from 2002-2013 based on the contact dates, although the files were timestamped in 2017."

"Additionally, the team found around 2000 "scrubbed" reviews in the misconfigured bucket, in which the user's sensitive information was wiped or redacted. However, the scrubbed reviews contained a lead ID that would enable a malicious actor to trace it back to the person who wrote it as the reviews and lead data were in the same exposed database."

How Did the Senior Advisor Respond?

Immediately upon discovering the data breach, WizCase contacted Senior Advisor to alert them. The company responded by securing the file; however, the damage could already be done.

Data Breach at Senior Advisor

According to WizCase,

"The greatest danger of this breach stems from the specific group of people left vulnerable. SeniorAdvisor is targeted toward senior citizens in or near retirement. In a  2018-2019 report, the FTC noted that people who filed a fraud complaint in the ages of 60-69 lost $600 per scam on average. The amount rose as the age group was older, culminating in $1700 on average per scam for people in the ages of 80-89."

Senior Citizens a Prime Target

Senior citizens are prime targets for cybercriminals because they are unaware of the dangers, are more trusting of strangers, and could be suffering from memory loss or other physical or mental issues.

Spear phishing targets specific groups of people, and hackers use this type of attack to ensnare seniors in various kinds of scams. Armed with someone's name, email address, and phone number along with their age (which can be determined easily online), a scammer could easily trick an older adult out of money, credit card or bank details, or login credentials for other accounts. Seniors also often have substantial savings from a lifetime of working making them attractive targets.

Some of the most popular scams perpetrated against seniors include:

  • Healthcare/Medicare/Insurance fraud.
  • Charity scams.
  • Reverse mortgage schemes.
  • Phishing emails about Covid or counterfeit prescription drugs.
  • Lottery scams.
  • Grandparent scam. 
  • Anti-aging products.
  • Social security fraud.

Above is just a sampling of the ways that criminals target seniors. The information breached by Senior Advisor could unleash a flood of different types of attacks targeting older Americans.

How Seniors Can Stay Safe

Some ways that senior citizens can stay safe after a data breach are:

  • Always use strong passwords for devices and online accounts.
  • Never share your credentials or personal information with anyone unsolicited.
  • Never reuse passwords on multiple accounts.
  • Do not click links or download attachments that come through email.
  • Always verify the sender of an email before taking any action.
  • Remember that thieves will try and do anything to get you to hand over details.
  • Protect your personally identifiable information (like your social security number, driver's license, etc.) at all costs.
About the Author
IDStrong Logo

Related Articles

Instagram Vulnerability Allowed Hackers Access to Control Your Phone

Security experts Check Point Research discovered a critical vulnerability while examining Instagra ... Read More

Alien Malware Infects More than 226 Mobile Apps and Steals Bank Data

As reported on September 24, 2020, by ZDNet and ThreatPost, a new strain of malware named “A ... Read More

Universal Health Systems Hit by Ransomware Attack

Universal Health Systems (UHS), a Fortune 500 company owning more than 400 hospitals across the co ... Read More

Exchange Server Bug Exposes a Big Risk to Hackers

Months after Microsoft released a patch to fix a serious flaw in MS Exchange Server, more than 61% ... Read More

Clients’ Bank Data Exposed in Blackbaud Ransomware Attack

Blackbaud software was victim to a ransomware attack last May, and new information suggests that c ... Read More

Latest Articles

What Is An On-Path Attack and How Does It Work? 

What Is An On-Path Attack and How Does It Work? 

Suppose someone left their home, got in their car, and drove to the grocery store. Much like data packets that travel over Internet highways, the car will use various pathways to reach its destination; however, once the car gets to the store, a question remains: what happened between the generating point and the destination?

What is Bait and Switch Scams: How it Works and How to Avoid It

What is Bait and Switch Scams: How it Works and How to Avoid It

Ever follow an ad featuring limited-time products to a company's web page only to find they're selling something else entirely?

What is Intellectual Property Infringement, and How to Avoid It? 

What is Intellectual Property Infringement, and How to Avoid It? 

When we think of "property," the first thing that comes to our mind might be tangible objects—items we've purchased, like cars and homes, or entitlements we've procured, like land, titles, or even honorifics.

Featured Articles

How to Buy a House with Bad Credit

How to Buy a House with Bad Credit

Buying your own home is the American Dream, but it might seem out of reach to those with bad credit. However, the good news is, if your credit is less than perfect, you do still have options and in most cases, can still buy a home.

How Secure Is Your Password? Tips to Improve Your Password Security

How Secure Is Your Password? Tips to Improve Your Password Security

Any good IT article on computers and network security will address the importance of strong, secure passwords. However, the challenge of good passwords is that most people have a hard time remembering them, so they use simple or obvious ones that pose a security risk.

Top 10 Senior Scams and How to Prevent Them

Top 10 Senior Scams and How to Prevent Them

Senior scams are becoming a major epidemic for two reasons. First, seniors often have a lot of money in the bank from a life of working hard and saving.

Free Identity Exposure Scan
Instantly and Securely Check if Your Personal Information is Exposed on the Dark Web or Sold by Data Brokers
Please enter first name
Please enter last name
Please select a state
Close
Free Identity Threat Scan
Instantly Check if Your Personal Information is Exposed
All fields below are required
Please enter first name
Please enter last name
Please enter a city
Please select a state
Please enter an age
Please enter an email address
Close