Personal data about almost every Ecuadorean citizen has been found exposed online.
Names, financial information and civil data about 17 million people, including 6.7 million children, was found by security company vpnMentor.
The massive cache of data was found on an unsecured Amazon cloud server almost anyone could look at.
Access to the server has now been restricted thanks to Ecuador’s computer emergency security team.
Serious breach
“The data breach involves a large amount of sensitive personally identifiable information at the individual level,” wrote Noam Rotem and Ran Locar, from vpnMentor.
As well as basic identity data, the exposed files include:
official government ID numbers
phone numbers
family records
marriage dates
education histories
work records
The cache of information also included some financial records tallying account balances of customers of one large Ecuadorean bank. Tax records, including official revenue ID numbers for companies, were found on another file.
“This data breach is particularly serious simply because of how much information was revealed about each individual,” the security researchers said.
The pair said they had found the 18GB of data spread across a variety of files saved on an unsecured server set up and run by Novaestrat – an Ecuadorean marketing and analytics company.
Original Post: https://www.bbc.com/news/technology-49715478
