Certified Divers Had Their PII Exposed Due to PADI Blunder

guest · May 9, 2020

Certified Divers Had Their PII Exposed Due to PADI Blunder
The Professional Association of Diving Instructors has exposed the PII of 2.3 million of its members
May 8, 2020
https://www.technadu.com/certified-divers-pii-exposed-padi-blunder/101401/

The “Professional Association of Diving Instructors” (PADI) has exposed the personally identifiable information of its members after leaving an Elasticsearch server open for access without setting up a password. The cluster contained 2,313,197 records that concern American divers who had been certified by PADI in the past.

Researcher Bob Diachenko discovered the leaky server on May 6, 2020, but unfortunately, the first indexing on Shodan happened way back (on April 23, 2020). PADI received the notice and secured the database today, but they have provided no explanations regarding this matter.
Thankfully, the data doesn’t include payment information, although fees are involved in the process of getting certified by PADI.

Still, the above information would be useful in the hands of phishing actors, scammers, and identity theft actors.
Click to expand...

Security Discovery: PADI Certified Divers Records Exposed in a Misconfiguration Incident

Log in or Sign up

Certified Divers Had Their PII Exposed Due to PADI Blunder

guest Guest

Log in or Sign up

Certified Divers Had Their PII Exposed Due to PADI Blunder

guest Guest

Useful Searches