FatakPay, an Indian loan company, was found storing sensitive data in an unprotected S3 bucket
The data included people’s names, addresses, IDs, and more
The company has since locked the database down
Instant loan company FatakPay kept sensitive data on millions of its users exposed on the internet, for an unknown period of time to anyone who knew where to look.
In mid-September 2024, security researchers from Cybernews discovered a misconfigured Amazon AWS S3 bucket containing more than 27 million files filled with sensitive information.