EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Hacker News·Aug 24·5 min read
a Blackstone real estate company exposed SSN digits, DOBs, addresses and more
TL;DR
A security oversight at Beam Living, a Blackstone real estate company, exposed sensitive personal information, including Social Security numbers and addresses, during lease applications. This incident highlights vulnerabilities in data handling practices.
✦ Why It Matters
Review your data handling practices to ensure sensitive information is securely managed and transmitted.
Key Takeaways
- Monitor network activity when submitting sensitive information online.
- Test for vulnerabilities using known email addresses.
- Establish clear channels for reporting security issues.
- Advocate for better security practices in data handling.
How It Works
The vulnerability arose from a GraphQL query that allowed access to sensitive applicant data using only an email address. This design flaw enabled unauthorized retrieval of personal information without proper authentication checks.