Report: Scotiabank exposed source code and credentials on GitHub repositories

guest · Sep 19, 2019

Report: Scotiabank exposed source code and credentials on GitHub repositories
September 19, 2019
https://www.scmagazine.com/home/sec...-code-and-credentials-on-github-repositories/

For months in some instances, Canadian banking giant Scotiabank reportedly stored highly sensitive digital property on a series of publicly open and accessible GitHub repositories, potentially exposing its internal source code, login credentials and access keys.

The financial institution had the repositories “torn down” earlier this week after being alerted to the error, according to The Register, which was first to report on the situation. The repositories contained hundreds of files, some of which contained code that appears to be intended for mobile apps for Central and South American users.

“The information we identified that was posted on an online data repository does not contain information that would put our customers, employees and partners at risk,” said a Scotiabank spokesperson, in response to an SC Media inquiry. “Our technical teams are working to remove the information.”
Coulls called the data leak “muppet-grade security” on the part of Scotiabank, which serves more than 25 million customers and employs over 97,000 individuals. “I feel like I’ve educated a whole new population in the ways the British use the word ‘muppet,'” Coulls, who is originally from the U.K., later said in a tweet.
Click to expand...

Log in or Sign up

Report: Scotiabank exposed source code and credentials on GitHub repositories

guest Guest

Log in or Sign up

Report: Scotiabank exposed source code and credentials on GitHub repositories

guest Guest

Useful Searches