Welcome to DU!
The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards.
Join the community:
Create a free account
Support DU (and get rid of ads!):
Become a Star Member
Latest Breaking News
Editorials & Other Articles
General Discussion
The DU Lounge
All Forums
Issue Forums
Culture Forums
Alliance Forums
Region Forums
Support Forums
Help & Search
Adoption Agency Data Exposure Revealed Information About Children and Parents
The adoption process is inherently sensitive, involving deeply personal information about children, birth parents, adoptive parents, and other caregivers. So when longtime data-breach hunter and security researcher Jeremiah Fowler came across a publicly accessible database online at the end of June that seemed to contain information related to adoption, he was instantly concerned.
Fowler scrambled to identify the owner of the database, which he concluded was the largely Texas-based nonprofit Gladney Center for Adoption. He then worked to notify the organization about the exposed data on June 25 but received no reply. He attempted notification again on June 26, and within a few hours the database was silently secured—hopefully before anyone else was able to access it.
Misconfigured databases are common online, even after years of effort to raise awareness about the issue, making information accessible to whoever comes across it. Fowler was particularly alarmed to see adoption-related data, though, because the trove included details like the identities of some children's biological parents, data on individuals' medical and mental health status, information about interactions with Child Protective Services, and even records referencing court orders. The database also included more typical personally identifying information like names, addresses, phone numbers, email addresses, and unique identifiers assigned to children's cases. Fowler was ultimately able to trace the database to Gladney, because it also contained information about some of the organization's employees.
“This is the first time in all of my research that I’ve seen adoption data, and it stood out because a lot of these kids are very vulnerable,” Fowler tells WIRED. “I believe that this data was exposed during the move to a different system and that it was up for a few days before I found it. So I go to sleep at night hoping I got to it before the bad guys did.”
Fowler scrambled to identify the owner of the database, which he concluded was the largely Texas-based nonprofit Gladney Center for Adoption. He then worked to notify the organization about the exposed data on June 25 but received no reply. He attempted notification again on June 26, and within a few hours the database was silently secured—hopefully before anyone else was able to access it.
Misconfigured databases are common online, even after years of effort to raise awareness about the issue, making information accessible to whoever comes across it. Fowler was particularly alarmed to see adoption-related data, though, because the trove included details like the identities of some children's biological parents, data on individuals' medical and mental health status, information about interactions with Child Protective Services, and even records referencing court orders. The database also included more typical personally identifying information like names, addresses, phone numbers, email addresses, and unique identifiers assigned to children's cases. Fowler was ultimately able to trace the database to Gladney, because it also contained information about some of the organization's employees.
“This is the first time in all of my research that I’ve seen adoption data, and it stood out because a lot of these kids are very vulnerable,” Fowler tells WIRED. “I believe that this data was exposed during the move to a different system and that it was up for a few days before I found it. So I go to sleep at night hoping I got to it before the bad guys did.”
https://www.wired.com/story/adoption-agency-data-exposure-revealed-information-about-children-and-parents/]