3.2 Million Files Revealed on AWS S3 Bucket

guest · May 22, 2018

3.2 Million Files Revealed on AWS S3 Bucket
May 22, 2018
https://www.infosecurity-magazine.com/news/3-2-million-files-revealed-on-aws/

A Los Angeles County nonprofit that provides health and human services accidentally exposed about 3.2 million files on an unsecured AWS S3 bucket, according to the UpGuard cyber risk team.

211 LA County, a nonprofit organization serving LA County, was reportedly left publicly exposed online. The content revealed in the downloadable files was widespread. In addition to access credentials for the 211 system operators and email addresses for contacts, "included in the more than 3 million rows of call logs are 200,000 rows of detailed notes," UpGuard wrote in a 17 May post.

The call notes included personally identifiable information for people reporting the problem. Among those were “persons in need, and, where applicable, their reported abusers, including graphic descriptions of elder abuse, child abuse, and suicidal distress, raising serious, large-scale privacy concerns,” according to UpGuard.

The information, stored in an Amazon AWS S3 bucket located at the subdomain “lacounty,” was inadvertently misconfigured to be publicly and anonymously accessible, according to UpGuard.
Click to expand...

mirimir · May 22, 2018

I'm imagining something like, "You mean that others can see stuff in our S3 bucket? I thought that it was private!"

guest · May 30, 2018

Honda leaked personal information for more than 50,000 users of its Honda Connect App
May 30, 2018
https://mackeepersecurity.com/post/honda-leaked-personal-information-from-its-honda-connect-app/

Kromtech Security Center experts recently discovered two public unsecured Amazon AWS S3 Buckets, one named hconnect-prod and one named hconnect-qa, both belonging to Honda Car India. Inside them were found unprotected databases containing the personal information for over 50,000 users of it's Honda Connect App.
What was leaked?
The information leaked contained names, phone numbers for both users and their trusted contacts, passwords, gender, email addresses for both users and their trusted contacts, plus information about their cars including VIN, Connect IDs, and more.
Simply Astounding!
With the shear volume of discovered leaky S3 buckets and the massive amount of coverage given to them it's just astounding to us that we are still finding them. It shows that many companies of all sizes are not paying any attention to their security. Honda Car India didn't even notice that a security researcher added a note to their buckets. There is no excuse for that, it clearly illustrates that they are simply running on auto-pilot with no monitoring at all.
Notification and Response
Kromtech quickly notified Honda Cars India and though it took a while, we did finally get a response and Honda Cars India has since secured these S3 Buckets.
Click to expand...

guest · Jul 18, 2018

Thousands of US voters' data exposed by robocall firm
Each record contains a voter's name, address, and "calculated" political affiliation.
July 18, 2018
https://www.zdnet.com/article/us-voter-data-exposed-by-robocall-firm/

A Virginia-based political campaign and robocalling company, which claims it can "reach thousands of voters instantly," left a huge batch of files containing hundreds of thousands of voter records on a public and exposed Amazon S3 bucket that anyone could access without a password.

Kromtech Security's Bob Diachenko, who discovered the exposed data and blogged his findings, shared prior to publication several screenshots of data, packed with voters' full names, home addresses, and political affiliations.

The data also included gender, phone numbers, age, and birth year, as well as a jurisdiction breakdown based on district or zip code and other demographics, like ethnicity, language spoken, and education.
Click to expand...

guest · Aug 3, 2018

Web doc iCliniq plugs leaky S3 bucket full of medical files
Even the file names exposed sensitive info, claim researchers
August 03, 2018
https://www.theregister.co.uk/2018/08/03/icliniq_cloud_breach/

Online medical consultation service iCliniq has restricted access to thousands of medical documents it left in a public AWS S3 bucket.

iCliniq acted earlier this week only after the slip-up was brought to its attention by German security researcher Matthias Gliwka. Gliwka approached El Reg after initially failing to get any response to notification emails he sent to the firm.

The global health startup, which is based in India, allows users to ask medical questions in private, to which they can attach private medical info, to be answered by doctors. However, iCliniq stored these private medical documents in a public AWS S3 bucket.
This bucket, according to Gliwka, contained about 20,000 medical documents (such as information on blood screens and HIV tests).
Click to expand...

guest · Aug 9, 2018

GoDaddy Exposes System Map and Business Strategy Info on AWS
August 09, 2018
https://www.darkreading.com/attacks...-business-strategy-info-on-aws/d/d-id/1332525

Another week, another publicly accessible AWS storage cloud found to be leaking vital enterprise secrets. This time around, the exposed company in question is GoDaddy. Researchers with the UpGuard Cyber Risk Team today disclosed that they found the giant in domain registration and hosting left an Amazon S3 bucket wide open for public consumption.

Included within that data store were documents that detailed configurations for tens of thousands of GoDaddy systems in the AWS cloud. Additionally, documents with pricing information about these systems were similarly accessible.

"Essentially, this data mapped a very large scale AWS cloud infrastructure deployment, with 41 different columns on individual systems, as well as summarized and modeled data on totals, averages, and other calculated fields," UpGuard's researchers reported.
Click to expand...

guest · Aug 23, 2018

Spyware Company Leaves ‘Terabytes’ of Selfies, Text Messages, and Location Data Exposed Online
August 23, 2018
https://motherboard.vice.com/en_us/...ny-spyfone-terabytes-data-exposed-online-leak

A company that markets cell phone spyware to parents and employers left the data of thousands of its customers—and the information of the people they were monitoring—unprotected online.

Last week, the researcher found the data on an Amazon S3 bucket owned by Spyfone, one of many companies that sell software that is designed to intercept text messages, calls, emails, and track locations of a monitored device.

The researcher said that the exposed data contained several terabytes of “unencrypted camera photos.”
The company’s backend services were also left wide open, not requiring a password to log into them, according to the researcher, who said he was able to create admin accounts and see customer data.

“Spyfone appears to be a magical combination of shady, irresponsible, and incompetent,” Eva Galperin, the director of cybersecurity at digital rights group Electronic Frontier Foundation, told Motherboard.
Click to expand...

guest · Oct 31, 2018

Nigerian airline Arik Air may have leaked customer data
October 31, 2018
https://www.zdnet.com/article/nigerian-airline-arik-air-may-have-leaked-customer-data/

An exposed Amazon S3 bucket was reportedly the source of leaked customer data belonging to carrier Arik Air.

According to research published by Justin Paine, Head of Trust & Safety at Cloudflare, the security expert's regular scanning for open and vulnerable Amazon S3 buckets resulted in the discovery of one containing a large number of CSV files.

As in the recent cases of Alteryx, GoDaddy, and Pocket iNet, leaky buckets are not uncommon, and a simple misconfiguration error in such systems can result in the public exposure of caches of valuable, sensitive data online
[...] This is reportedly the case with Arik Air
Click to expand...

Log in or Sign up

3.2 Million Files Revealed on AWS S3 Bucket

guest Guest

mirimir Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

3.2 Million Files Revealed on AWS S3 Bucket

guest Guest

mirimir Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches