Exposure investigations
Documenting publicly accessible systems and databases, with an emphasis on evidence, responsible handling and impact.
Explore the work ↗INDEPENDENT RESEARCH · CYBERSECURITY
Tracking exposures.
Demanding accountability.
I'm Kevin Logan. I uncover unauthenticated assets, database leaks, and perimeter security flaws. Where appropriate, I demand corporate transparency and engage with regulators to hold organisations accountable.
kevin@research:~$ whoami
Independent researcher
kevin@research:~$ focus --list
[01] Data exposure investigations
[02] Technical deep dives
[03] Cybersecurity awareness
kevin@research:~$ _
01 / ONGOING INVESTIGATION
Smart Dental Care: the investigation continues.
The exposure has been secured, but the work isn't finished. My objective is clear: affected patients and employees should be informed about what happened to their personal information, so they can understand the risks and take appropriate steps. I continue to seek meaningful victim notification, transparency and accountability.
COMPLETED EPISODE · ONGOING FOLLOW-UP
EXPOSED. SECURED. COVERED UP.
Inside the Smart Dental Care Breach — the evidence, responsible disclosure and unanswered questions surrounding notification.
Watch the investigation ↗
Evidence and investigation highlights
Screenshots from the investigation and supporting research. The original investigation is complete; the pursuit of notification and accountability continues.
02 / SELECTED WORK
Research, explained clearly.
Investigations and educational content focused on understanding what happened, why it matters, and what can be learned.
Cybersecurity awareness
Short, practical explainers on tools, security concepts, common failures and lessons that matter beyond the technical details.
Watch & listen ↗Technical deep dives
Technical breakdowns of exposed systems, security tools and incident evidence — explaining how failures happen and what they reveal.
About my approach ↗03 / PODCAST & VIDEO
Full episodes
Independent investigations, real-world exposures and technical deep dives.
A Tale of Two Dental Breaches
Two dental data breaches, and the questions they raise about protecting sensitive patient information.
Watch on YouTube ↗
Insecure By Default: The Passwords Nobody Changed
How default credentials and insecure configurations can leave connected systems open to compromise.
Watch on YouTube ↗
MALWARE IN THE MACHINE | Uncovering a Hidden C2 Network
An investigation into compromised reverse vending machines, malware, and command-and-control infrastructure.
Watch on YouTube ↗
LAZARUS: Cybercrime with a flag
From the Sony attack to bank heists and cryptocurrency theft: the evolution of a state-linked threat group.
Watch on YouTube ↗
100 Days in the Dark: How Regulators Failed 250,000 NHS Patients
A closer look at the regulatory response to a major exposure of sensitive dental healthcare information.
Watch on YouTube ↗
ShinyHunters
A look at the cybercriminal group, its tactics and the risks of data theft.
Watch on YouTube ↗04 / SHORT-FORM VIDEO
Cybersecurity Shorts
Short investigations, technical demonstrations and cybersecurity stories — some narrated, others set to music.
04 / IN THE PRESS
In the Press
Independent journalism covering security research, data exposures and the questions that follow. More reporting will be added here as it is published.
NI dental company has not notified patients more than five months after data breach
Luke Butterly investigates the Smart Dental Care exposure, patient notification concerns, and responses from the company, regulators and public officials.
Read the investigation ↗05 / ABOUT
About the research
Exposing the truth, stopping the cover-ups, and building better security—one bit at a time.
AREAS OF INTEREST
Technical deep divesData exposureIncident timelinesSecurity awarenessSecurity research
This site serves as a central hub for my research updates, video explainers, and podcast episodes. My goal is to translate complex security breakdowns into plain English—without losing sight of the people impacted by them.
06 / GET IN TOUCH
Have a tip or a question?
For general enquiries, get in touch by email. For responsible security disclosures, use the dedicated disclosure address.
07 / YOUTUBE
Watch the full episodes
Subscribe to my YouTube channel for all full-length episodes and shorts.
Visit my YouTube channel ↗