Exposed Bank Backup File Revealed Customer Data, Credentials and Cryptographic Keys
Summary
A security assessment found a publicly accessible backup file containing bank customer data, credentials, authentication tokens, cryptographic keys, logs and decompiled source code. The article recommends securing backups and rotating exposed credentials.
Key points
- An exposed compressed backup file was accessible to anyone with its URL.
- The archive contained customer personal and insurance information, including names, mobile numbers, vehicle details and policy data.
- Researchers found administrator credentials, authentication tokens and internal portal credentials in the exposed files and logs.
- Cryptographic keys and decompiled internal application source code were also exposed.
- The article says the credentials and keys could enable access to internal services or decryption of sensitive data; it does not report confirmed exploitation.
- Recommended steps include restricting backup access, rotating exposed credentials, protecting cryptographic keys, disabling directory listing, and improving access controls and monitoring.
Article Details
- Victim Organization
- Not disclosed
- Victim Domain
- Not disclosed
- Incident Type
- Exposure of a publicly accessible compressed backup file caused by a misconfiguration
- Data Types Exposed
- Customer names
- Mobile numbers
- Vehicle registration numbers
- Engine and chassis details
- Insurance policy information
- Encrypted customer credentials
- Authentication tokens
- Internal portal and administrator credentials
- Application error logs
- Cryptographic keys
- Internal application source code
- Operational Impact
- The exposed backup file and its contents were accessible to anyone with the correct URL. The article describes potential risks to customer accounts and internal services but reports no confirmed operational disruption or misuse.
- Ransom Or Extortion
- None reported
- Claim Status
- confirmed