Cybersecurity researcher Jeremiah Fowler discovered an unencrypted, non-password-protected database containing over 1.1 million records linked to the Gladney Centre for Adoption, a Texas-based organization that has offered adoption services for more than 130 years. The 2.49 GB database, exposed on the public web, reportedly included personally identifiable information (PII) such as names, physical and email addresses, phone numbers, and other sensitive data.
The records appeared to be part of a Customer Relationship Management (CRM) system, mixing plain text and Universally Unique Identifiers (UUIDs). Folders within the database included information on children, birth and adoptive parents, internal staff, case notes, and contact details.
Particularly concerning were documents in the “applications” folder containing case-specific notes, including reasons for adoption denials such as substance use, as well as records under “Birth Fathers” listing full names and private background information.
Jeremiah Fowler promptly reported the exposure to Website Planet and issued a responsible disclosure notice to Gladney. Gladney secured the system shortly after notification and issued public statements reaffirming their commitment to data protection, external investigation, and notification protocols. It remains unclear whether the database was directly managed by Gladney or a third-party contractor, or how long it had been exposed.
Due to the personal and emotional nature of the data, Jeremiah Fowler warned that the exposed records could be exploited for identity theft, phishing attacks, or fraud. Although there’s no evidence of malicious access, the incident underscores the risks of handling sensitive information without adequate cybersecurity measures.
As part of organizational growth and integration with Madison Adoption Associates, Gladney announced a three‑year technology modernization plan. The initial phase (2024) focuses on enterprise infrastructure upgrades. By 2026, Gladney aims to provide clients with real‑time access to a counseling and training library via a digital platform. This initiative is designed to deliver scalable, on‑demand educational and support resources for adoptive and birth families.
InfotechLead.com News Desk
