Massive GovTech breach leaks 42 million documents — including thousands packed with personal information
A large database full of personal information was discovered and locked down.
A recent security breach at CitySourced, a US civic technology company that develops software enabling residents to report local issues, has exposed a staggering 42 million documents and 450,000 JSON files containing personal information. Among the leaked records were names, postal addresses, email addresses, phone numbers, and internal records spanning from 2016 to 2026.
The database, which primarily consisted of complaints or code violation reports, was initially found by cybersecurity researcher Jeremiah Fowler, who then informed CitySourced. After the discovery, CitySourced confirmed that the company had secured the database. Fowler suggests that businesses can secure their infrastructure by segmenting customer environments and internal data, encrypting storage systems and backups, and employing access controls.
As for individuals, Fowler advises treating incoming emails with skepticism, especially those containing unsolicited links, attachments, or urgent messages.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
