A maker of internet-connected devices left roughly 2.7 billion records sitting in an open database — no password, no encryption. Among them: WiFi network names, WiFi passwords, IP addresses, and device IDs, each tied to a real home.
records exposed
names + passwords leaked
encryption on the database
Reported by Infosecurity Magazine and others: a Chinese IoT manufacturer (Mars Hydro) left an unprotected, unencrypted database of nearly 2.7 billion records exposed to the open internet. The data included Wi-Fi SSIDs, Wi-Fi passwords, IP addresses, and device identifiers — enough to locate and log into the networks of the homes using those devices.
A connected gadget is only as safe as the vendor's sloppiest server. One misconfigured database, and the device you bought to make your home smarter hands an attacker the password to your whole network. You didn't leak it — your appliance did.
Your WiFi password shouldn't live on someone else's server. On the internet, it does.
A single open database exposes everyone at once.
The breach is theirs; the consequences are yours.
The rule people who run infrastructure live by: never connect the things you care about to the internet. No outside line, no database of your secrets on someone else's hardware.
Your home's intelligence, with no server to leak it.
Aura runs entirely on-device. There's no cloud account, no credential store, no database of your home sitting on a vendor's server — because nothing it hears or knows ever leaves the room. Nothing to breach.