Teen monitoring app TeenSafe exposes thousands

Teen monitoring app TeenSafe exposes thousands of passwords

UK-based security research worker Henry M. Robert Wiggins has found 2 exposed TeenSafe servers, leaky the passwords and data of some users of the observance service.

TeenSafe is supposed to shield teenagers by material possession their oldsters monitor their texts, phone calls, internet history, location, and app downloads. The breach was initially reported by ZDNet.

According to the report, TeenSafe left 2 of their servers, that were hosted on AWS, exposed and visible by anyone. Moreover, the information enclosed info similar to the parent’s email address, child’s Apple ID email address, device name, device distinctive symbol, and plaintext passwords for the teenager’s Apple ID.

So… as regards to everything.

TeenSafe needs that teenagers abstain from exploitation two-factor authentication in order that oldsters will keep a watch on their activity, creating those teenagers even a lot of prone to malicious actors currently that their personal info has been exposed.

TeenSafe claims on its website that it encrypts knowledge in order that it wouldn’t be accessible within the case of the breach.

According to ZDNet, the server commands a minimum of ten,200 records from the past 3 months containing client knowledge. The publication additionally enclosed that a number of those records were duplicates which one in all the servers seemed to store check knowledge.

That said, it’s unclear if there square measure alternative leaky servers with exposed knowledge nevertheless to be discovered.

TeenSafe says it's over one million oldsters exploitation the platform.

“We have taken action to shut one in all our servers to the general public and begun alerting customers that might probably be wedged,” a TeenSafe representative told ZDNet on Sunday.

We reached out on to TeenSafe and can update the post if/when we tend to hear back.