Imagine, further, this person could access your sensitive business data in much the same way. Imagine if someone could publicly access, in near real-time - within an hour - your sensitive personal data on the websites you are browsing. To address the evolving threat to data security, we propose preemptive measures such as limiting access to shareable links, and removing PII and CI from metadata.

By deploying a honeypot to monitor web traffic, we discovered near-immediate visits to URLs collected by the extensions. Several Fortune 500 companies provided an additional measure of confirmation through a process of responsible disclosure. We identified the collection of sensitive data from the internal network environments of Fortune 500 companies. We observed two extensions employing dilatory tactics - an effective maneuver for eluding detection - to collect the data. In this report, we delineate the sensitive data source types relevant to the security of individuals and businesses across the globe. Our investigation uncovered an online service selling the collected browsing activity data to its subscription members in near real-time. We present DataSpii (pronounced data-spy), the catastrophic data leak that occurs when any one of eight browser extensions collects browsing activity data - including personally identifiable information (PII) and corporate information (CI) - from unwitting Chrome and Firefox users. DataSpii: The catastrophic data leak via browser extensions

Hoverzoom violates google chrome store