The World’s Largest Youth-Run Organization Had a Data Breach

guest · Jan 21, 2019

The World’s Largest Youth-Run Organization Had a Data Breach
January 21, 2019
http://securitydiscovery.com/aiesec-data-breach/

On January 11th, Bob Diachenko of SecurityDiscovery.com, identified another unprotected Elasticsearch instance which contained millions of records – this time related to AIESEC, “the world’s largest youth-run organization. According to Wikipedia the AIESEC network has 27,500 leadership positions and over 100,000 members in 127 countries.

Among other information, the database contained around 4 million of applications which were tagged as “opportunity applications” for AIESEC internships and included sensitive information as email, full name, DOB, gender, plus a detailed description on their intentions for applying for AIESEC as well as interview details
The Danger of Leaving the Front Door Open
Although AIESEC acted fast to secure their data it is unclear how long it may have been publicly available or who else might have accessed the millions of files containing PII. This raises the question of how charities and non-profits with limited resources can afford to safely manage millions of sensitive files?
Click to expand...

Log in or Sign up

The World’s Largest Youth-Run Organization Had a Data Breach

guest Guest

Log in or Sign up

The World’s Largest Youth-Run Organization Had a Data Breach

guest Guest

Useful Searches