Cyber Risks · Krebs on Security

Ayuda! (Help!) Equifax Has My Data!

Summary: Researchers at Hold Security found that an Equifax employee portal in Argentina, known internally as Veraz and Ayuda, was protected by the password "admin/admin" and let anyone view the names, employee IDs and email addresses of more than 100 Equifax employees in Argentina. The portal also exposed more than 14,000 consumer complaint records across roughly 715 pages, each listing the person's DNI, the Argentinian equivalent of a Social Security number, in plain text; Equifax disabled the portal after being contacted by KrebsOnSecurity and said it was investigating.

What's compelling: More than 14,000 Argentinians had their national ID numbers sitting in plain text behind a default password, in a country where Hold Security's Jorge Speranza says access to credit is recent and hard-won - and Equifax's own literature lists operations in Brazil, Chile, Ecuador, Paraguay, Peru and Uruguay, with no word on whether those portals were any better.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related