Misconfigured AWS S3 Bucket Exposes PII of up to 350,000 SSL247 Customers

guest · Aug 29, 2020

Misconfigured AWS S3 Bucket Exposes PII of up to 350,000 SSL247 Customers
August 26, 2020
https://cisomag.eccouncil.org/misconfigured-aws-s3-bucket/

Security researchers Noam Rotem and Ran Locar from security firm vpnMentor discovered a misconfigured AWS S3 bucket exposing sensitive files related to SSL247, a reseller of internet security products.
The leaky database exposed the personal information of up to 350,000 customers (150 GB), who made purchases through SSL247 between 2012-2020. The data breach affected customers in South America, the Middle East, North America, Europe, and Africa.

According to the research, the S3 bucket contained over 465,000 files, and due to misconfigured permissions and privacy settings, the data was exposed to the public.
The exposed documents hold various forms of Personally Identifiable Information (PII) of private individuals and companies using SSL247’s services.
Click to expand...

vpnMentor: Report: Leading Internet Security Company Exposes Customers to Fraud and Attack From Hackers

This data breach represented a lapse in the most fundamental data security practices by SSL247, a well-regarded company trusted by many high-profile corporations and government bodies.

[...] compromising the security of people who depend on SSL certificates and similar products to protect their identity.
Exactly what SSL247 is trying to prevent.
Click to expand...

SSL247 could have easily avoided exposing its customers’ data if it had taken some basic security measures to protect its customers’ data.
Click to expand...

Log in or Sign up

Misconfigured AWS S3 Bucket Exposes PII of up to 350,000 SSL247 Customers

guest Guest

Log in or Sign up

Misconfigured AWS S3 Bucket Exposes PII of up to 350,000 SSL247 Customers

guest Guest

Useful Searches