Comments On 750-Thousand Birth Certificate Applications Exposed On The Web

A UK pen testing company – Fidus Information Security found an unprotected AWS server that exposed the information of 750-thousand birth certificate applications. A Techcrunch report  indicates that was a third-party supplier of data to the U.S. government left the server unprotected.

James Carder, Chief Information Security Officer & Vice President,  LogRhythm Labs
December 12, 2019
First and foremost, there is a damage in trust as it relates to the states’ and governments’ ability to protect your information.
This breach follows the recent trend of data being exposed in misconfigured, unprotected, unmonitored, and globally accessible cloud storage buckets. In recent years, some of our largest breaches have involved the use of these buckets to grab the sensitive data of hundreds and thousands of companies or individuals at once. And unfortunately, this is just another example of the classic story of poo ....
[Read More >>]
Elad Shapira, Head of Research,  Panorays
December 11, 2019
Incidents such as these underscore the very real need for organizations to thoroughly assess.
This is yet another example of data exposure through a poorly configured server and its potentially disastrous consequences. In this case, the provider was reported to be a third-party data supplier of the US government, and the leak included sensitive birth certificate information that can be used for malicious purposes such as identity theft. Incidents such as these underscore the very real need ....
[Read More >>]

If you are an expert on this topic:

Submit Your Expert Comments

In this article