The cybersecurity report reveals that Huddle01 exposed user data through an unprotected Kafka broker, risking privacy and security. The leak included sensitive information like email addresses, usernames, and crypto wallet details, highlighting misconfiguration issues. #Huddle01 #KafkaSecurity
Keypoints
- The Huddle01 app left its Kafka broker unprotected, accessible without authentication or encryption.
- Over 621,000 log entries containing personal and activity data were exposed over 13 days.
- The leak potentially deanonymized crypto wallets by linking them to user identities.
- Huddle01 did not respond to security disclosures, leaving the data exposed for a month.
- Users should change passwords, enable two-factor authentication, and monitor suspicious activity.
Read More: https://www.malwarebytes.com/blog/news/2025/10/video-call-app-huddle01-exposed-600k-user-logs