Delhi Citizens Data Leak

guest · Feb 22, 2019

Delhi Citizens Data Leak
February 21, 2019
https://securitydiscovery.com/delhi-citizens-data-leak/

On Feb 19, 2019, I have discovered a MongoDB that required no password. The database was located in an India region which (along with other data) also contained highly sensitive information collected on 458,388 individuals located in Delhi. A 4.1GB-sized database had been indexed by Shodan and was left unattended for public access.

The database was named “GNCTD” which also stands for Government of National Capital Territory of Delhi and contained the following collections and record [...]

According to their site, Transerve “offer solutions to make cities smarter, sustainable and effective in operation to impact the quality of life”. It is also ‘”democratizing data through Transerve Data Collector”.
We cannot say for sure that this database is connected to GNCTD, but that is highly likely based on the evidence.
Click to expand...

These attacks are able to occur because the MongoDB database is remotely accessible and not properly secured. This means that these attacks are easily prevented by following fairly simple steps in securing the database instance
Click to expand...

Log in or Sign up

Delhi Citizens Data Leak

guest Guest

Log in or Sign up

Delhi Citizens Data Leak

guest Guest

Useful Searches