CitySourced breach exposes 42 million documents and personal data

Researcher Jeremiah Fowler found an open database belonging to GovTech firm CitySourced containing roughly 42 million documents and 450,000 JSON files with plaintext personal data. Records included names, addresses, emails, phone numbers and internal files from 2016 to 2026; the database was secured after disclosure.

• The exposed CitySourced database held about 42 million documents
• 450,000 JSON files stored personal data in plaintext
• Leaked records included names, addresses, emails, phones and complaints from 2016–2026
• The database was locked down after researcher Jeremiah Fowler reported it