Brazilian security firm leaks more than 25 GB of client and staff data

guest · Mar 6, 2020

Brazilian security firm leaks more than 25 GB of client and staff data
March 6, 2020
https://www.zdnet.com/article/brazi...ses-more-than-25-gb-of-client-and-staff-data/

A configuration failure on a server belonging to Orsegups Participações, a large Brazil-based holding company that controls seven businesses active in the property security sector, exposed a series of tax documents revealing clients' contract values and staff information.

The leak, investigated by ZDNet in partnership with Brazilian cybersecurity news website The Hack, has compromised more than 25 GB of files, including invoices, and tax collection documents referring to services provided by the group's companies.
Orsegups describes itself as a leading company in the security sector, with over 40 years of experience in providing home security services to private companies, public sector bodies and individuals

The files exposed by the leaky S3 bucket had a wide variety of tax documents intended for internal use, which reveal the value of contracts for services provided to public and private entities. This included hundreds of thousands of payment slips and tax documents including receipts and social security documents of Orsegups' own employees.
Click to expand...

In a statement, the company noted that the S3 bucket "only stored legacy files from a portal that had already been disabled in 2017, in an AWS account that is no longer used." The company added that it has a security team to monitor its active platforms and implemented good practices and governance for its data security.
Click to expand...

Log in or Sign up

Brazilian security firm leaks more than 25 GB of client and staff data

guest Guest

Log in or Sign up

Brazilian security firm leaks more than 25 GB of client and staff data

guest Guest

Useful Searches