This is a new chapter of my responsible disclosures to entities that have accidentally left unprotected data exposed in the cloud by “mistake”.

When I discovered this Google Storage, I dug deeper into the exposed backups since the other files didn’t provide the name of the Thai tech company, Ubakong. Based on their website and social media, they specialize in mobile applications, mobile design, development, and Android.

After visiting their website, I couldn’t find an email address for responsible disclosure. I had to search through the backups to find a suitable contact for the company’s technology team. I first reached out on April 2nd, reporting that their storage was public, exposing backups in SQL and PDF formats, and that third parties could have accessed and downloaded the material. However, I never received a response.