An “error” in the Walgreens app left some customer data exposed for several days in January.

The company removed the bucket from the open internet after being contacted by CyberScoop.

The unauthorized access occurred between August 1, 2018 and March 30, according to an SEC filing.

Most of the data was about American users.

The Silicon Valley security firm identified exposures by Mexico-based media company Cultura Colectiva and the now-defunct "At the Pool" app.

“Gearbest’s database isn’t just unsecured. It’s also providing potentially malicious agents with a constantly-updated supply of fresh data.”

24 million records, one server, no password.

The database did not require visitors to enter a username or password to access the information.

Cybersecurity organization Hacken said it found the misconfigured servers as part of a regular security audit. The data appears to come from millions of U.S. residents.

In March, Google found that a flaw in its Google+ People API exposed data including name, email address, occupation, gender and age. "We found no evidence that…