Security researchers said a security lapse at IT giant Tech Data allowed them to access customer and billing data.
The Fortune 500 information technology giant secured an exposed server shortly after researchers Noam Rotem and Ran Locar found and reported the leaking data.
The server was running a database used for logging internal company events for its StreamOne cloud service, which let customers buy cloud services from a variety of providers and vendors. The logging data contained error data that Tech Data staff can use to troubleshoot issues that arise when customers try to buy service online.
But the tech giant did not put a password on the server, allowing anyone with a web browser to look over daily logs for the last several months.