
- Cybernews found Tokee’s unprotected MongoDB exposing ~1.2M users’ data
- Leak included names, phone numbers, avatars, device tokens, IDs, activity logs, and account status; chat logs were encrypted
- Deucetek secured the database after disclosure; no evidence of malicious access, but users warned of phishing risks
A messaging app called Tokee kept an unprotected database with plenty of sensitive information, exposing over a million customers to whoever knew where to look.