Fintech Startups Credit Fair and Chqbook leak sensitive records due to unprotected databases

guest · Aug 2, 2019

Fintech Startups Credit Fair and Chqbook leak sensitive records due to unprotected databases
Leak Closed Off Within Hours Says Chqbook
August 1, 2019
https://inc42.com/buzz/fintech-startups-data-breach-leak-closed-off-within-hours-says-chqbook/

A web privacy research group, vpnMentor has found data breaches in two Indian fintech startups — Credit Fair and Chqbook on July 24. While Credit Fair provides online shopping credit to customers. Chqbook is a finance marketplace which connects customers to credit cards, and personal loans providers.

vpnMentor said in blog post, “our team discovered that both Credit Fair and Chqbook’s entire databases were unprotected and unencrypted. Credit Fair uses a Mongo Database, while Chqbook uses Elastic Search, neither of which were protected with any password or firewall.”
For Chqbook, the research group claimed to have accessed 67 GB of user data [...] was left vulnerable for a couple of hours on one day but it was soon secured by the team.

Further, in the case of Credit Fair, vpnMentor group said it was able to extract 44K user records containing fields such as phone number, detailed information of their loan applications, PAN number, IP address, session tokens, Aadhaar number, and more.
The lending company has still not fixed the issue [...]
Click to expand...

vpnMentor: Report: Data Leaked from 2 Indian Financial Service Sites

Log in or Sign up

Fintech Startups Credit Fair and Chqbook leak sensitive records due to unprotected databases

guest Guest

Log in or Sign up

Fintech Startups Credit Fair and Chqbook leak sensitive records due to unprotected databases

guest Guest

Useful Searches