Razer Inc.—Razer exposed personal data of approximately 100,000 customers through misconfigured Elasticsearch server
In 2020, security researcher Volodymyr Diachenko discovered that Razer had left an Elasticsearch server misconfigured and publicly accessible, exposing the personal information of approximately 100,000 customers. Leaked data included full names, email addresses, phone numbers, customer IDs, order numbers, and billing/shipping addresses. Razer initially took weeks to respond before securing the server.
Scoring Impact
| Topic | Direction | Relevance | Contribution |
|---|---|---|---|
| User Privacy | -against | primary | -1.00 |
| Overall incident score = | -0.286 | ||
Score = avg(topic contributions) × significance (medium ×1) × confidence (0.57)× agency (negligent ×0.5)
Evidence (1 signal)
Security researcher discovered Razer's Elasticsearch server exposing 100K+ customer records
Volodymyr Diachenko discovered an unprotected Elasticsearch server belonging to Razer, exposing personal data of approximately 100,000 customers including full names, emails, phone numbers, and order details. Razer took several weeks to respond.