Researchers say misconfigured Firebase instances exposed 125M+ customers' data, including plaintext passwords, email addresses, and messages, across 900 websites (Ionut Arghire/SecurityWeek)

Ionut Arghire / SecurityWeek:

Researchers say misconfigured Firebase instances exposed 125M+ users’ records, including plaintext passwords, email addresses, and messages, across 900 websites  —  A weakness in a Firebase implementation allowed researchers to gain access to names, phone numbers, email addresses, plaintext passwords, confidential messages, and more.