Data Leak Exposes IDs of Airport Security Workers

A cloud misconfiguration at a foremost security solutions multinational has exposed the specifics of countless airport staff throughout South The usa, in accordance to a new report.

A team at AV comparison web-site Safety Detectives uncovered an Amazon Web Expert services S3 bucket wide open up without the need of any authentication expected to check out the contents. Soon after notifying the proprietor, Swedish security large Securitas, on Oct 28 2021, the business secured the database a couple days later on November 2.

Within the 3TB trove, the scientists located individually identifiable information and facts (PII) on Securitas and airport personnel courting back to November 2018.

✔ Approved From Our Partners

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code

At the very least 4 airports throughout Peru (Aeropuerto Internacional Jorge Chávez) and Colombia (El Dorado Intercontinental Airport, Alfonso Bonilla Aragón Global Airport, and José María Córdova International Airport) are impacted.

Safety Detectives is not certain accurately how numerous employees are impacted, but claimed the S3 bucket contained about 1.5 million files.

These consist of images of ID playing cards that includes full names, occupations and national ID numbers, as properly as other miscellaneous photographs of workers, planes, luggage and additional. The bucket was seemingly are living and staying updated at the time of its discovery.

If located by threat actors, the database could have enabled not only comply with-on identification fraud and frauds, but much much more major felony acts, Basic safety Detectives warned.

“Photos of IDs and staff members could let criminals to impersonate different customers of team – staff members that can get accessibility to limited spots of the airport, this sort of as baggage-loading places and even planes,” it claimed.

“Criminals could even use leaked information to produce counterfeit ID cards and badges. A prison could additional fortify their appearance as a respectable employee by downloading leaked mobile apps.”

Colombia in distinct has a record not only of major structured crime but also guerrilla warfare teams plotting to destabilize the state.