A mobile real estate app with roughly half a million users was apparently holding sensitive user data in an unprotected database, freely available for all who knew where to look.
The data held there contained enough information for hackers to mount identity theft attacks, phishing, and other social engineering fraud.
