Secret terrorist watchlist with 2 million records exposed online

Last month a US government secret terrorist watchlist with almost 2 million records was found by a security researcher on an Elasticsearch cluster with no password.

The database contained personal information, passport details as well as their no-fly status. The source of the dataset is believed to be the FBI's Terrorist Screening Center.

This seems like a pretty big screw up by somebody. Makes ya wonder if there's any ATS members on there

www.bleepingcomputer.com...

A secret terrorist watchlist with 1.9 million records, including classified "no-fly" records was exposed on the internet.

The list was left accessible on an Elasticsearch cluster that had no password on it.

Millions of people on no-fly and terror watchlists exposed

In July this year, Security Discovery researcher Bob Diachenko came across a plethora of JSON records in an exposed Elasticsearch cluster that piqued his interest.

The 1.9 million-strong recordset contained sensitive information on people, including their names, country citizenship, gender, date of birth, passport details, and no-fly status.

the source of the recordset could be the Terrorist Screening Center (TSC).

FBI's TSC is used by multiple federal agencies to manage and share consolidated information for counterterrorism purposes.

The agency maintains the classified watchlist called the Terrorist Screening Database, sometimes also referred to as the "no-fly list."

Such databases are regarded as highly sensitive in nature, considering the vital role they play in aiding national security and law enforcement tasks.

Terrorists or reasonable suspects who pose a national security risk are "nominated" for placement on the secret watchlist at the government's discretion.

a reply to: dug88

lol I know I am not. I have a TSA PreCheck pass

Hi!

Sweet OP dug88. This makes me grin 4 eels.

So much to meditate on, be grateful for, and question.

Always.

I love ATS.

Can you hear me now?

a reply to: dug88

Inept idiots are in control

a reply to: dug88

Where can i find a copy?

a reply to: shaemac

I tell TSA im not stepping into their microwave and make them strip search me every time.

a reply to: drewlander

That's what I wanted to know. The man who found the information turned it over to the feds immediately so we will probably never see it. I followed all the links and he did supply a count by nationality of people on it. I can't find it right now but France was about 1800, Great Britain 15, US just 5 so the odds are pretty good we are not on it.

If 2 million people don't like you, maybe you are the terrorist?

Sounds like more bs intimidation. Like the dhs terrorism statement.
You question the fake election?

Gtfo..intimidation for political purposes IS terrorism

originally posted by: drewlander
a reply to: dug88

Where can i find a copy?

Same question here
Heard about this a few days back, want to see how much of my data is on this specific leak.

I am not what they think I am and I'd be very surprised if they even came close. Even most who think they know me best are far off the mark. Let them have the straw man, I'll render unto Caesar, they'll never have my soul, never come close. I own nothing of this world. "Nothing came easy, nothing came free, nothing came at all until they gave it to me."

EEEKK! Double Post. It's like farting in public.

a reply to: REDMORGAN

Not everyone on ATS is American...I'm not...

a reply to: dug88
Why worry?
As the past has shown 911 was still carried out.
Ofcourse the incompetence and ineptitude will prevail.
Nothing but a track record of failings.

a reply to: lordcomac

I would convert that nosql bull# to a fine tuned oltp search tool hosted on alibaba cloud with yandex cloud failover on secondary dns cuz you know they wouldnt respond to a takedown request.

--deleted.

a reply to: dug88

Do they even give that many badges of honours to their troops?

originally posted by: dashen

Long live the king.

a reply to: Nunyabizisit

I agree with that. But then again, if you use ATS regularily, then your already on someone's list.

Like Santa Claus!

No wonder they can't catch real terrorists because they're tracking 2 million people.