Des kiosques Pokémon exposés par une fuite Firebase

A clandestine publication alleges that a US-based automated distribution operator exposed sensitive data – including bank details, email addresses, source code, and technical access – across multiple continents via exposed Google Cloud and Firebase environments. The leak involved 217 machines linked to 28 brands, including Pokémon Company International, CVS Pharmacy, and Google, and encompassed a vast amount of customer data, including 70,546 card fingerprints and 59,797 partially masked receipts. The attacker gained access within minutes using common API keys and project identifiers.