Ry Crozier reports: Imagine what would happen if you went to open your emailed group certificate and found out it was your boss’ or a colleague’s instead. That’s the rather awkward situation some customers of MYOB could be facing after its automated payroll program accidentally emailed 220 individual payment summaries to the wrong people. Read…
Category: Exposure
Eight people are arrested in Hong Kong over cyberattacks against police as the city copes with the aftermath of anti-government protests
AFP and Tracy You report: Hong Kong police said today they had arrested eight people for stealing and disclosing personal information of officers online as the city grapples with the aftermath of unprecedented anti-government protests that saw its parliament ransacked. […] Six men and two women, aged 16-40, were arrested last night for allegedly ‘doxxing’…
Billions of Records Including Passwords Leaked by Smart Home Vendor (Updated)
Sergiu Gatlan reports: A publicly accessible ElasticSearch cluster owned by Orvibo, a Chinese smart home solutions provider, leaked more than two billion user logs containing sensitive data of customers from countries all over the world. Orvibo provides its clients with smart solutions designed to help them manage houses, offices, and hotel rooms via smart systems…
Jack’d To Pay $240K For Private Photos Leak
Devin Randall reports: Jack’d is paying out money make up for its picture leak. Earlier this year, we shared with you how a single tech expert Oliver Hough discovered that there was a large hole in Jack’d’s code. It turns out, the company did not properly secure photos and data uploaded using Amazon Web Services…
AWS S3 server leaks data from Fortune 100 companies: Ford, Netflix, TD Bank
Catalin Cimpanu reports: Attunity, an Israeli IT firm that provides data management, warehousing, and replication services for the world’s biggest companies, has exposed some of its customers’ data after it left three Amazon S3 buckets exposed on the internet without a password. The leaky AWS S3 buckets contained information on Attunity’s own operations, but also…
5 million personal records belonging to MedicareSupplement.com exposed to public
Paul Bischoff writes: An online database of more than 5 million records apparently belonging to MedicareSupplement.com was left open and accessible to the public. On May 13, 2019, Comparitech worked alongside security researcher Bob Diachenko to uncover the publicly available MongoDB instance that appears to be part of the website’s marketing leads database. MedicareSupplement.com is…