Forest Global Training Partners

Cyber Risks · Krebs on Security

U.S. Internet Leaked Years of Internal, Customer Emails

Summary: U.S. Internet Corp., a Minnesota ISP whose Securence unit sells filtered email security, was publishing more than a decade of its own internal email and that of thousands of Securence clients in plain text on the Internet until KrebsOnSecurity notified it. Hold Security found a public link to a U.S. Internet email server listing more than 6,500 domain names, with messages dating from 2008 to the present day, including inboxes for every current and former U.S. Internet and USI Wireless employee and customers such as nc.gov, stillwatermn.gov and cityoffrederickmd.gov.

Why it matters: The company's CEO attributed the exposure to an Ansible playbook misconfiguration for its IMAP servers put in place by a former employee and never caught, and the company has not said how long the messages were exposed or disclosed the incident on its own website. A vendor that sells email security to government agencies exposed the mail of more than 6,500 customer domains, and its link-scrubbing service was also being abused to redirect visitors to malicious sites.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related