RocketText Breach

In May 2019, ApexSMS Inc.—which operates under the names Mobile Drip and Rocket Text—suffered a major breach when an unsecured MongoDB instance exposed roughly 80 million records containing sensitive customer data. Later, in January 2020, another breach involving Rocket Text was discovered that affected about 32 million records, including email addresses, home addresses, IP addresses, and phone numbers. Although both incidents were caused by misconfigured, unprotected databases, they occurred at different times and impacted different volumes of data.