New York payments startup exposed millions of credit card numbers

guest · Apr 23, 2020

New York payments startup exposed millions of credit card numbers
April 22, 2020
https://techcrunch.com/2020/04/22/paay-unencrypted-credit-card-data/

A massive database storing millions of credit card transactions has been secured after spending close to three weeks exposed publicly to the internet.

The database belongs to Paay, a card payments processor based in New York. Like other payment processors, the company verifies payments on behalf of selling merchants, like online stores and other businesses, to prevent fraudulent transactions.
But because there was no password on the server, anyone could access the data inside.

Security researcher Anurag Sen found the database. He told TechCrunch that he estimates there are about 2.5 million card transaction records in the database.

“On April 3, we spun up a new instance on a service we are currently in the process of deprecating,” said Paay co-founder Yitz Mendlowitz. “An error was made that left that database exposed without a password.”
Click to expand...

TechCrunch reviewed a portion of the data. Each transaction contained the full plaintext credit card number, expiry date and the amount spent.
Mendlowitz disputed the findings. “We don’t store card numbers, as we have no use for them.” TechCrunch sent him a portion of the data showing card numbers in plaintext, but he did not respond to our follow-up.
Click to expand...

Log in or Sign up

New York payments startup exposed millions of credit card numbers

guest Guest

Log in or Sign up

New York payments startup exposed millions of credit card numbers

guest Guest

Useful Searches