Edward Kiledjian's Threat Intel

Nexar dashcam video database hacked www.malwarebytes.com/blog/news…

A hacker cracked into a database of video recordings taken from Nexar-branded cameras, which are built to be placed drivers’ cars, according to a new report from 404 Media. Nexar is a dashcam company that promotes its products as “virtual CCTV cameras” and offers automatic cloud uploads of critical incidents, AI-driven insights, and real-time road alerts.

The hacker found all the videos on an improperly secured Amazon Web Services (AWS) bucket. The hacker were able to access the AWS bucket because embedded in every Nexar dashcam was a key to this database.

Another find by the hacker was a file showing the companies and organizations that Nexar says have had access to the company’s data. According to the document, these include Apple, Microsoft, Amazon, Google, Pokémon Go creator Niantic, transportation companies Lyft and Waymo, the cities of Los Angeles and Austin, the NYPD, and many AI- and logistics-focused companies.