The online musical instrument marketplace Reverb has suffered a data breach which has exposed the personal details of 5.6 million users. Security researcher Bob Diachenko, who has a long track record of uncovering databases left unsecured on the internet, came across an unsecured Elasticsearch server earlier this month which allowed anyone to access information about millions of Reverb’s users – no password required.

Read full article on Graham Cluley