Skip to main content

This widely-used instant loan app leaks nearly 30 million files of user data

Web Hosting & Remote IT Support
  • FatakPay, an Indian loan company, was found storing sensitive data in an unprotected S3 bucket
  • The data included people's names, addresses, IDs, and more
  • The company has since locked the database down

Instant loan company FatakPay kept sensitive data on millions of its users exposed on the internet, for an unknown period of time to anyone who knew where to look.

In mid-September 2024, security researchers from Cybernews discovered a misconfigured Amazon AWS S3 bucket containing more than 27 million files filled with sensitive information.

The data found in the bucket includes people’s full names, postal addresses, email addresses, phone numbers, copies of national IDs, loan agreements, account statements, filled-in loan applications, user selfies for verification, PAN (a PIN number issued by the Indian Income Tax Department), Aadhar (a PIN number issued by the Unique Identification Authority of India), and credit score reports.

Closing the archive

After a few attempts, the researchers managed to get in touch with FatakPay, which then closed the bucket, but has not yet released an official statement regarding the discovery.

FatakPay is a digital payment and micro-lending platform in India that provides instant credit solutions to users for small-ticket transactions. At press time, its Google Play Store page shows 1M+ downloads, but the exact number of active users is not publicly available.

Misconfigured databases remain one of the key causes of data leaks. Some researchers warned that many organizations don’t fully understand the shared responsibility model of most cloud hosting providers, and that they believe it is the service provider’s job to keep the data secure.

As a result, researchers often stumble upon large databases full of information that crooks could use for identity theft, phishing, social engineering, wire fraud, and more.

Recently, a Mexican fintech startup was found holding a large database full of sensitive customer data wide open on the internet. The company, called Kapital, held data on 1.6 million Mexicans, including voter IDs and selfies.

You might also like



via Hosting & Support
Labels:

Comments

Post a Comment

Web Hosting
Remote IT Support
Sites & Socials

Popular posts from this blog

Last orders! Breville’s Birthday Sale ends in 24 hours – save an extra 10% on already-discounted espresso machines with our exclusive code

Web Hosting & Remote IT Support It’s been a busy month for coffee machine maestro, Breville. Not only did it celebrate International Coffee Day at the start of the month, but this October is also the company’s birthday month. And to mark the occasion, you can save up to AU$550 on a range of top-performing espresso machines . And that’s not all, as you can save a further 10% on discounted models with our exclusive Breville coupon code . Alternatively, you can use our exclusive promo code sitewide on the complete range of Breville appliances. You’ll need to hurry though, as the Breville Birthday Sale comes to a close at 11:30pm AEDT 21 October. Breville is, of course, responsible for some of the best coffee machines in Australia , and as a result, it can make choosing the ideal model for your household a little bit trickier. To help guide you to cafe-quality coffee at home, I’ve picked out so...
Post a Comment
Read more

Mova V70 Ultra Complete review: a full-featured robovac let down by subpar performance

Web Hosting & Remote IT Support Mova V70 Ultra Complete: Two-minute review If you've never heard of Mova as a brand, you're not alone as it was initially only available in select European and South-East Asian countries. The brand, which is owned by Dreame Technology, is now expanding and is supposed to be value-focused side of the company — although you'd be hard pressed to believe that when its latest flagship robot vacuum costs upwards $1,000 / £1,000 / AU$3,000. However, the Mova V70 Ultra Complete brings everything you expect from such an expensive robovac, including some industry-first features that are now being adopted by other brands. This includes suction that's a whopping 42,000Pa at its maximum, as well as the impressively long reach of the side brush and mopping arm (12cm and 17cm respectively). I even love the fact that it eliminates the need for dust bags by us...
Post a Comment
Read more

UK small businesses are spending big on Anthropic — but OpenAI isn't far behind as expenditure on AI tools hits new high

Web Hosting & Remote IT Support An estimated 1 out of every 8 UK small and medium businesses are paying for AI tools Over 28% of SMEs are using two or more AI platforms Publishing is the main UK sector adopting AI British SMEs are moving toward AI solutions, with adoption increasing from 1.1% in 2023 to 12.8% in 2026, new research has claimed. The study , by small business credit card providers Capital on Tap, also shows that while smaller companies may have more modest budgets, they’re still happy to spread their bets when it comes to choosing an AI solution. Over 28% of SMEs are using multiple AI platforms – with Anthropic’s Claude just edging out OpenAI’s ChatGPT, with the average quarterly spend growing to a quarterly average of £75.60 per SME. SMEs explore AI Anthropic is the most popular AI provider among British SMEs according to the research, with those businesses devoting 54.1% of ...
Post a Comment
Read more