By: Leonardo Neri  

This week, it was reported that data from 1.3 million users of the social network Clubhouse, a platform for exchanging audio messages, had been leaked. The leaked data was allegedly exposed in a database available on the internet.

The platform denies having been invaded or hacked and claims that the data made available on the internet is public data, available on users' own profiles.

Information security specialist Mantas Sasnauskas states that the platform's system allows users to search for a set of information, using a token, for example, and that the mere prohibition of such practice in the social network's terms of use is not enough.

The leaked database contains information such as user ID, name, profile picture URL, Twitter account, Instagram account, number of followers, number of people followed by the user, account creation date and name of the profile that sent the invitation to join the network.

Even though this is public data, the mass collection of profile information generates great concern for users who own the leaked data, given the possibility of information being cross-referenced with other databases and possibly used to carry out scams.