A security audit uncovered a test server that had been left accessible to the public for months, containing a database with live customer information.
A security audit uncovered a test server that had been left accessible to the public for months, containing a database with live customer information. Richard Schut, who was serving as Managing Director and AI Software Researcher at SmartRepl during the audit, identified the vulnerability while reviewing systems slated for cloud migration. The staging environment had been created temporarily to demonstrate an application and test data migration, but remained operational long after its intended short-term use. It lacked standard authentication and access controls because its creators did not anticipate external access. The database file, labeled master_test_final.sql, held actual customer records. Schut restricted access immediately and initiated a review of all development and test environments within the company. He emphasized that environments handling real data must be secured regardless of their intended lifespan, noting that even brief exposure creates risk. The incident prompted changes in how staging environments are managed at the organization.
- Publisher
- theregister
- Reliability
- high
- Published
- 9/18/2026, 7:22:00 AM
- Retrieved
- 9/18/2026, 7:22:00 AM
- Relevance
- 80%
- Confidence
- 85%

