Thursday, January 10, 2013

Search engine exposes breach of security at bank

In what appears to be a breach of security, an Internet search for a lawyer’s phone number led a Mumbai-based researcher to a large trove of data (http://knowledge.bankofindia.com:8080) that looks like a directory comprising scores of folders stored on the Bank of India portal. Each folder comprised documents that indexed data, which included user IDs, names, date of birth, email IDs, passwords, details of branch and head offices. One of the many folders accessed by The Hindu listed details of what appeared to be data pertaining to more than 42,000 users..........

No comments: