Ecommerce service exposed passports, ID details of users

guest · Aug 10, 2019

Ecommerce service exposed passports, ID details of users
S3 bucket included details of individuals included in the Dow Jones Watchlist
August 8, 2019
https://www.computerworld.com.au/article/665140/ecommerce-service-exposed-passports-id-details-users

Sensitive personal details of individuals, including whether they appeared on the Dow Jones Watchlist of risky individuals, were exposed by a publicly accessible Amazon Web Services S3 bucket.

The documents in the S3 bucket, which was locked down earlier this week, were associated with the New Zealand operation of ecommerce service Cloud Union. Cloud Union, which originally launched in China, operates a plug-in loyalty service for its merchant clients. Consumers can sign up to the service and earn redeemable reward points across participating merchants.

The S3 bucket housed dozens of scanned or photographed passports as well as electronic identification verification (EIV) checks.
The bucket was locked down shortly after CERT NZ and the company were alerted to the breach.
Click to expand...

Log in or Sign up

Ecommerce service exposed passports, ID details of users

guest Guest

Log in or Sign up

Ecommerce service exposed passports, ID details of users

guest Guest

Useful Searches