Cloud Configuration Error Exposes 260,000+ Actors

More than 260,000 actors have experienced their private knowledge uncovered thanks to still another misconfigured cloud server.

Scientists at SafetyDetectives led by Anurag Sen found the unprotected Elasticsearch server, which contained 1GB of information, amounting to 9.5 million documents.

It evidently belonged to New Orleans-dependent casting agency MyCastingFile.com, which has recruited actors for Terminator videos, Tv set display Accurate Detective and other productions.

The “talent profiles” found in the trove provided total names, household and email addresses, phone numbers, dates of delivery, top and body weight, photographs and car facts.

In whole, over 260,000 associates experienced their details exposed in this way, including perhaps actors underneath the age of 18, according to SafetyDetectives.

It warned that the leaked email addresses and own info could be utilised to ship convincing phishing e-mails impersonating MyCastingFile, in buy to trick consumers into clicking via on malware downloads.

“Photographs presented by customers can be harnessed to conduct scams involving facial recognition this kind of as identity fraud, as properly as becoming applied to generate several illegitimate profiles, to carry out what is acknowledged as ‘catfishing’ — the act of luring someone into a connection by means of a fictional on the web persona,” it extra.

It’s considered the databases was exposed because Could 31 2020, but the researchers stated the issue was preset adhering to their disclosure.

Pravin Kothari, founder and CEO of cloud security vendor CipherCloud, argued that preventing misconfigurations in the cloud is progressively demanding.

“These issues most frequently revolve close to a absence of visibility into faulty controls, not a deficiency of exertion,” he extra.

“Perhaps the major hurdle, even increased than checking for dangerous configurations, as in this situation, relates to greater administration of cloud info alone. We find that companies are shifting so quickly to embrace cloud applications and infrastructure that they are unable to maintain visibility into all the issues of information security and accessibility essential to reduce subsequent breaches.”