U.S. Internet Leaked Years of Internal, Customer Emails (<i>U.S. Internet is a company</i>)

Krebs on Security ^ | 02/14/2024 | Brian Krebs

[aimhigh]

The Minnesota-based Internet provider U.S. Internet Corp. has a business unit called Securence, which specializes in providing filtered, secure email services to businesses, educational institutions and government agencies worldwide. But until it was notified last week, U.S. Internet was publishing more than a decade’s worth of its internal email — and that of thousands of Securence clients — in plain text out on the Internet and just a click away for anyone with a Web browser.

Headquartered in Minnetonka, Minn., U.S. Internet is a regional ISP that provides fiber and wireless Internet service. The ISP’s Securence division bills itself “a leading provider of email filtering and management software that includes email protection and security services for small business, enterprise, educational and government institutions worldwide.”

Roughly a week ago, KrebsOnSecurity was contacted by Hold Security, a Milwaukee-based cybersecurity firm. Hold Security founder Alex Holden said his researchers had unearthed a public link to a U.S. Internet email server listing more than 6,500 domain names, each with its own clickable link.

[aimhigh]

Ooops!

[Skwor]

One would have to be seriously naive to believe this was just something overlooked, and “accident” so to speak.

[Rembrandt]

Is that Internet company the one that Algore owns ?

[algore]

no

[EEGator]

Timing is everything…

[jdege]

Unencrypted email is as secure as an old party line phone. anybody can listen in.

So anybody fool enough to include sensitive information in an email deserves what they get.