Jana Small Finance Bank Exposed Millions of Records Online

guest · Jul 24, 2019

Jana Small Finance Bank Exposed Millions of Records Online
July 23, 2019
https://securitydiscovery.com/jana-bank-data-leak/

On May 26th, I discovered a non-password protected database that contained what appeared to be millions of financial transactions. Upon further research I was able to connect the data to an Indian based microfinance bank called Jana Cash.

The Jana Bank security team acted fast and professionally upon receiving my notice. It is unclear how long the data may have been exposed or who else may have had access to it.
How sensitive was the data?
KYC or Know Your Customer laws require that that users verify who they are. This means users must share their personally identifiable information to comply with the rules. The bad part is the KYC verification information was stored in a publicly accessible database that anyone with an internet connection could access. Jana Bank requires one of the following: [...]

Providing loans and credit is important and a valuable service, but this is a wake up call for any organization who collects and stores user or customer data.
Click to expand...

Log in or Sign up

Jana Small Finance Bank Exposed Millions of Records Online

guest Guest

Log in or Sign up

Jana Small Finance Bank Exposed Millions of Records Online

guest Guest

Useful Searches