Real-time location data for over 11,000 Indian buses left exposed online

guest · Jan 7, 2019

Real-time location data for over 11,000 Indian buses left exposed online
January 7, 2019
https://www.zdnet.com/article/real-...-over-11000-indian-buses-left-exposed-online/

The data leaked via an ElasticSearch server that was left connected online without a password, according to security researcher Justin Paine, who shared his findings with ZDNet.

"In some cases, the username field appeared to be populated with a user-supplied username, but in other cases, it did appear to be the user's full name," Paine told ZDNet. "Some agencies also appeared to log the user's email address."
UNCLEAR WHO OWNS THE SERVER
"I will include the significant caveat that I cannot be sure, but it seems very likely this data was being collected by some type of government entitiy," the researcher told us.

According to Paine, the exposed server contained data aggregated from the following transportation agencies: [...]
This incident is just the latest in a string of data leaks caused by companies failing to secure their ElasticSearch servers properly.
Click to expand...

Log in or Sign up

Real-time location data for over 11,000 Indian buses left exposed online

guest Guest

Log in or Sign up

Real-time location data for over 11,000 Indian buses left exposed online

guest Guest

Useful Searches