MEDIUMVulnerability
Global

No need to hack when it’s leaking: Dalbir Singh & Associates law firm edition

·Source: DataBreaches.net

Updated:

Executive Summary

Dalbir Singh & Associates ignored multiple attempts at responsible disclosure but finally locked down its misconfigured Amazon bucket, only to expose it again. Now the data is in the hands of criminals trying to extort them. On April 6, DataBreaches reported on a misconfigured Amazon bucket belonging to an immigration law firm in New York.... Source

Analysis

Dalbir Singh & Associates ignored multiple attempts at responsible disclosure but finally locked down its misconfigured Amazon bucket, only to expose it again. Now the data is in the hands of criminals trying to extort them. On April 6, DataBreaches reported on a misconfigured Amazon bucket belonging to an immigration law firm in New York.... Source
Source Attribution

Originally published by DataBreaches.net on May 15, 2026.

Related Threats

LOWVulnerability

Avada Builder WordPress plugin flaws allow site credential theft

Two vulnerabilities in the Avada Builder plugin for WordPress, with an estimated one million active installations, allow hackers to read arbitrary files and extract sensitive information from the database. [...]

BleepingComputer
MEDIUMVulnerability

Microsoft Edge to stop loading cleartext passwords in memory on startup

Microsoft is updating the Edge web browser to ensure it no longer loads saved passwords into process memory in clear text at startup. [...]

BleepingComputer
MEDIUMVulnerability

Microsoft backpedals: Edge to stop loading passwords into memory

Microsoft is updating the Edge web browser to ensure it no longer loads saved passwords into process memory in clear text at startup after previously stating it was "by design." [...]

BleepingComputer