Daffodil International University

Faculty of Science and Information Technology => Recent Technologies and Trends in Software Engineering => Software Engineering => Cyber and Software Security => Topic started by: maruf.swe on March 30, 2019, 01:29:25 AM

Title: Insurance Customers’ Personal Data Exposed Due to Misconfigured NAS Server
Post by: maruf.swe on March 30, 2019, 01:29:25 AM

(https://media.threatpost.com/wp-content/uploads/sites/103/2017/06/06224242/Ports_Ethernet.jpg)
The vulnerability also exposed login credentials for a massive national insurance claims database, Upguard says.

Detailed personal information from thousands of insurance customers in Maryland–as well as login credentials for a massive national insurance claims database–was exposed due to an an open port on a NAS server.

The misconfiguration exposed a wealth of information on Maryland Joint Insurance Association policy holders, including names, addresses, phone numbers, dates of birth and Social Security numbers, according to researcher Chris Vickery of Upguard who discovered it. The data also includes bank account numbers, check images, internal access credentials.

For More Details : https://threatpost.com/insurance-customers-personal-data-exposed-due-to-misconfigured-nas-server/129834/ (https://threatpost.com/insurance-customers-personal-data-exposed-due-to-misconfigured-nas-server/129834/)