Orchard worker recruiter exposed sensitive personal data

guest · Oct 29, 2020

Orchard worker recruiter exposed sensitive personal data
Open S3 bucket indexed by search engine
October 29, 2020
https://www.itnews.com.au/news/orchard-worker-recruiter-exposed-sensitive-personal-data-555275

A Melbourne company recruiting horticultural workers, Orchard Tech, left an Amazon Web Services Simple Storage Service (S3) instance containing thousands of sensitive personal documents open for anyone to access for over a month.

Melbourne-based security researcher Sami Toivonen found the open S3 storage instance on October 24 and told iTnews it contained images of passports, driver's licences, tax forms, and employment contracts.
While Toivonen doesn't know how long the S3 instance has been exposed, he noted that it was indexed by one or more search engines on September 14 this year.
Click to expand...

Of these, the open S3 bucket contained 532 passport and 422 driver's licence images, Toivonen said.
Agricultural chemical user permits, hundreds of MADEC cards [an employment services provider] and tax forms, and thousands of employment contracts were also discovered on the storage instance.

Yellani told iTnews that his company uses the Dropbox storage service, but is currently moving some data to AWS.

"Our security is looking into it now, seeing what system has been breached and we are going to report it soon," Yellina said.
Click to expand...

Log in or Sign up

Orchard worker recruiter exposed sensitive personal data

guest Guest

Log in or Sign up

Orchard worker recruiter exposed sensitive personal data

guest Guest

Useful Searches