German cloud service provider exposes entire Georgian country population - millions of personal data files leaked

Date:
Fri, 24 Jan 2025 11:32:46 +0000

Description:
A non-password-protected database was recently discovered with millions of entries.

FULL STORY

A German cloud service provider has unintentionally exposed sensitive data on probably the entire population of Georgia, security researchers are saying.

Cybersecurity expert Bob Dyachenko, of SecurityDiscovery.com said they
recently discovered an non-password-protected Elasticsearch index containing
a wide range of sensitive personal details belonging to Georgians. The index hosted two indices, one with almost five million personal data records, and another with more than seven million.

Given that the entire population of Georgia counts less than four million people, its safe to assume that even with numerous duplicate entries, all of its citizens could be at risk of identity theft , phishing, and more.
Shutting down the leak

The archives contained peoples ID numbers, full names, birth dates, genders, phone numbers, and other sensitive information.

The data appears to have been collected or aggregated from multiple sources, potentially including governmental or commercial data sets and number identification services, Dyachenko said.

The researchers traced the instance back to a server owned by a German cloud service provider. The researchers did not name the company, and said that the server was taken offline shortly after discovery. It was left unclear if the company was notified of the leak. Therefore, we also dont know if any threat actors found the archives in the meantime, and if the data had been
exfiltrated elsewhere.

Without clarity on data ownership, recourse for affected individuals is limited, and it remains challenging to enforce data protection laws or seek accountability, the researcher said. This leak highlights the complexities of cross-border data protection and regulation.

Via Cybernews

======================================================================
Link to news story: https://www.techradar.com/pro/security/german-cloud-service-provider-exposes-e ntire-georgian-country-population-millions-of-personal-data-files-leaked

$$
--- SBBSecho 3.20-Linux
* Origin: capitolcityonline.net * Telnet/SSH:2022/HTTP (1:2320/105)