Huge Data Leak at Largest U.S. Bond Insurer
Summary: KrebsOnSecurity notified MBIA Inc., the nation's largest bond insurer, that a misconfigured Oracle Reports database server had exposed customer account numbers, balances and other data, with some 230 pages of Cutwater Asset Management account statements indexed by Google. The exposed diagnostics page included a username and password granting access to nearly all customer account data on the server, and MBIA disabled mbiaweb.com after being notified.
What's compelling: The indexed statements covered government investment pools including Texas CLASS, the Louisiana Asset Management Pool and the New Hampshire Public Deposit Investment Pool, and in some cases included the forms and fax numbers needed to authorize new bank accounts for deposits.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026