Data of nearly 700,000 Amex India customers exposed via unsecured MongoDB server

guest · Nov 7, 2018

Data of nearly 700,000 Amex India customers exposed via unsecured MongoDB server
Over 2.3 million user records were encrypted, but data for 700,000 customers was not
November 7, 2018
https://www.zdnet.com/article/data-...stomers-exposed-via-unsecured-mongodb-server/

The personal details of nearly 700,000 American Express (Amex) India customers have been accidentally left exposed online via an unsecured MongoDB server.

The leaky server, which was left exposed online without a password, was discovered three weeks ago by Bob Diachenko, Director of Cyber Risk Research at cyber-security firm Hacken.

"Upon closer examination, I tend to believe that the database was managed not by Amex but one their subcontractors responsible for SEO or lead generation," said Diachenko. "Many entries contained fields like 'campaignID', 'prequalstatus', 'leadID' etc."

Diachenko told ZDNet today that Amex India took down the leaky server on the same day he notified the company, albeit it remains unclear for how much time the server stood exposed online.
Click to expand...

Log in or Sign up

Data of nearly 700,000 Amex India customers exposed via unsecured MongoDB server

guest Guest

Log in or Sign up

Data of nearly 700,000 Amex India customers exposed via unsecured MongoDB server

guest Guest

Useful Searches