CNN reports: A researcher says the Pentagon exposed huge amounts of web-monitoring data in a security failure. Anyone with a free Amazon Web Services account could have looked at the hoard of information stored in the cloud by the U.S. Defense Department, according to Chris Vickery, a researcher at cybersecurity firm UpGuard who discovered the exposure. Read more…
Category: Exposure
Another day, another email gaffe
The Department of Social and Health Services’ Behavioral Health Administration confirmed Thursday that a spreadsheet containing private information of 515 patients at Western State Hospital was sent to an incorrect email address. Read more on QFox13.
More details emerge on AZ Board of Education student data breach
More details have emerged on a breach first noted on this site last month. Jim Small of the Arizona Center for Investigative Reporting (AZCIR) reports that the breach occurred after AZCIR filed a public records request for records of appeals filed by students over letter grades issued by the state Board of Education. On Oct….
Huddle’s ‘highly secure’ work tool exposed KPMG and BBC files
Chris Foxx reports: The BBC has discovered a security flaw in the office collaboration tool Huddle that led to private documents being exposed to unauthorised parties. A BBC journalist was inadvertently signed in to a KPMG account, with full access to private financial documents. Huddle is an online tool that lets work colleagues share content…
Social Security numbers of 2,100 Maine foster care participants posted online
J. Craig Anderson reports: The names, addresses and Social Security numbers of roughly 2,100 Mainers who receive foster care benefits were accidentally posted to a public website in September, the Maine Office of Information Technology said Monday. The incident was the responsibility of an employee of a contractor, Knowledge Services, who still has a contract…
Fasten data leak: Nearly 1 million users’ sensitive data mistakenly exposed by US ride-hailing firm
India Ashok reports: Over one million users’ personal and financial data was inadvertently publicly exposed by US-based ride hailing firm Fasten. The leaked data includes names, emails, phone numbers, credit card data, links to photos, device IMEI numbers, GPS data and users’ taxi routes. The firm also exposed sensitive information of its own drivers, including…