Cybersecurity researcher Jeremiah Fowler, a frequent collaborator of ExpressVPN, discovered an unprotected, unencrypted database linked to CitySourced, a civic engagement platform owned by Granicus. The platform allows residents to report issues to local governments in approximately 184 locations across North and Central America.
Jeremiah reviewed a limited sample of the exposed database, which included:
- About 42 million documents, including 450,000 JSON files containing plaintext personally identifiable information (PII), such as names, addresses, email addresses, and phone numbers.
- Images of resident complaints and code violation reports.
- Thousands of internal records dating from 2016 to 2026, along with application directories and executable files.
You can read Jeremiah’s full findings here: https://www.expressvpn.com/research/citysourced-data-exposed
Related
This entry was posted on October 29, 2026 at 3:32 pm and is filed under Commentary with tags Express VPN. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
42 million documents exposed in GovTech platform leak
Cybersecurity researcher Jeremiah Fowler, a frequent collaborator of ExpressVPN, discovered an unprotected, unencrypted database linked to CitySourced, a civic engagement platform owned by Granicus. The platform allows residents to report issues to local governments in approximately 184 locations across North and Central America.
Jeremiah reviewed a limited sample of the exposed database, which included:
You can read Jeremiah’s full findings here: https://www.expressvpn.com/research/citysourced-data-exposed
Share this:
Like this:
Related
This entry was posted on October 29, 2026 at 3:32 pm and is filed under Commentary with tags Express VPN. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.