“Rocket Text” Continues to Leak Sensitive User Data Online

• The SMS marketing firm “Rocket Text” is still leaking millions of sensitive user records online.
• The same company did it again last year, and the current database was discovered months ago.
• People should beware of incoming SMS containing URLs to phishing or malware dropping websites.

The SMS marketing firm “Rocket Text” is still leaking sensitive customer information via an unsecured Mongo database, even though researchers had first discovered this problem months ago. The exposure involves 63 million customer email addresses, phone numbers, full names, postal addresses, and zip codes. In 2019, Bob Diachenko had discovered another unprotected database belonging to the same entity, which was then named as “ApexSMS.” The researcher noticed the similarities in the structure of the records, so he was able to connect the two incidents.