Observed Signal · Jun 22, 2020 · Regulation · Source: OnlineMarketing.de · Impact: 3/5 · Sentiment: Negative
Oracle BlueKai Data Breach Reveals Tracking Network
A security lapse exposed a large Oracle subsidiary BlueKai data repository used for user tracking. An unsecured, passwordless server reportedly stored billions of personal records, including names, addresses, email addresses, and browser histories, accessible on the open internet. Security researcher Anurag Sen discovered the vulnerability, and Oracle indicated the issue has since been closed. Reports attribute the disclosure to Heise, with TechCrunch noting that authorities may not have been notified within the required timeframe per GDPR obligations, raising potential fines of up to €20 million. The incident is described as one of the year's largest security gaps and underscores privacy and data governance concerns within the ad-tech/data-broker ecosystem.
Significant data breach by a major data broker with potential GDPR/regulatory implications.
Track Oracle Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- BlueKai, an Oracle subsidiary, built a massive database of user information.
- A secure/unprotected server exposed billions of personal data records.
- Data included names, addresses, email addresses, and browser histories.
- Security researcher Anurag Sen discovered the unsecured server.
- Oracle stated the vulnerability has been closed; GDPR penalties up to €20 million were cited.
Connected Companies & Entities
1 Entity mappedRelated Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
Klaviyo leak exposed some sign-up passwords to advertisers
Security research by Melurna found that a misconfigured sign-up web form on Klaviyo’s site allowed new-customer sign-up information — including email addresses, passwords, company name, website and phone number — to be shared with third-party trackers and advertisers. The misconfiguration was present between at least February 2024 and November 2025, researchers told TechCrunch. Affected third parties reportedly included Facebook, Google, HubSpot, Microsoft/LinkedIn and X. Klaviyo said it fixed the issue and told TechCrunch the number of known affected individuals was fewer than 200 based on active logs; the company would not disclose how far back logs go or publicly share the customer notification. The findings were shared with TechCrunch ahead of a Def Con talk by the researchers.
Supabase data exposure: 16,000 databases leaking personal data
Cybersecurity firm UpGuard has discovered that approximately 16,000 databases hosted by Supabase, a popular development platform for AI vibe-coded apps, are exposing sensitive personal data to the public web. The exposed data includes names, addresses, phone numbers, and passwords, some of which are linked to sensitive projects like an Indian adult streaming site, a U.S. valet service, an immigration service, and even an African consulate. While Supabase, which recently reached a $10 billion valuation, has made security improvements, its CISO Bil Harmer emphasized that security is a shared responsibility and that projects are 'secure by default'. The findings highlight the growing risk of data breaches due to misconfigured AI-generated applications, as the ease of building apps with AI tools often leads to security flaws.
Higher Rates Split Market; AI Stocks Have Advantage: Cramer
Jim Cramer says that rising borrowing costs are splitting the stock market into two camps: credit-sensitive sectors facing pressure and AI-related firms that remain largely insulated. He highlights strong demand for AI growth, citing SpaceX's potential $40 billion borrowing to buy Nvidia chips for data centers, which he expects to get attractive terms despite its BBB rating. In contrast, Skydance's bonds fell after its acquisition of Warner Bros. Discovery, reflecting challenges in traditional media. Cramer argues that AI data center stocks are less affected by Treasury yields because their future growth prospects are considered extremely bright.
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.