- A travel tracking software company has suffered a data overgrowth
- The researcher discovered 10 Open Lost & found databases
- Over 800,000 Lost & Found -customers could be exposed to
A dataset containing 820,750 records a total of 122 GB has been discovered online probably belongs to the German tracking software company Lost & Found, which primarily serves the aviation industry.
As revealed by security scientist, Jeremiah Fowler, this was in an unprotected and publicly exposed data set with 14 databases, 10, which were available and 4 that were limited. Within these, the researcher found shipping labels, lost goods reports and screens, ranging from personal electronics, wallets, bags, medical equipment and other personal effects often travel on aircraft.
However, that is not all, as a number of personally identifiable documents were also included, such as pass scans, driver licenses, employment documents and more. The researcher suggests that these could either be lost and uploaded by airport staff or used to submit requirements and identify ownership of lost documents.
Customers at risk
When a publication announcement was sent, the databases were limited “within hours”. It is not yet known whether the databases were owned and managed directly by Lost & Found, or whether a third -party contractor had control. It is also unclear how long the data set was exposed to or whether threat actors gained access to the information.
As there is a possibility that the information was accessed by threat players, this leaves any exposed in the risk of the risk. Since IDs and passports were included, it means that the primary risk is identity theft as criminals could use these scans to apply for loans, credit cards or bank accounts.
To protect against this, anyone must be affected that they can be affected, closely monitor their account, transactions and statements and immediately report any suspicious activity to their bank.
Alongside this, be aware of all social technical attacks by carefully inspecting any unexpected communication you receive from unknown sources – especially those who create action.
