A vpnMentor research team found a large data repository at Tech Data Corporation, a company that offers tech products, services and solutions worldwide. A total of 264 GB of data was leaked.
The data that ended up on the streets included client servers, invoices, SAP integrations and plain-text passwords. Private API keys, bank and payment information, full names, e-mail addresses and postal addresses were also available. Perhaps more dangerous, however, was the fact that the researchers came across machine and process information from customers’ internal systems, in which errors were available. Other hackers could discover more about the system and how it works.
The researchers found the leak on 2 June, after which direct contact was sought with Tech Data Corporation. Two days later, the leak was plugged.
Database leakage
Specifically, it involved a complete database leak, which affected much of the business and personal data of Tech Data customers and employees. Tech Data is a 45 year old company that works with organizations such as Apple, Cisco, Samsung and Symantec.
The researchers at vpnMentor discovered that there was a log management server that leaked system-wide data. According to vpnMentor, this was a serious leak, with all the credentials needed to log into customer accounts being available.
Moreover, it would have been relatively easy for rogue actors to take over systems. Hackers would then be able to place uncontrolled orders, which means that the database could be abused by competitors. In addition, hackers could infect systems with ransomware by invading them.
Security measures
According to vpnMentor, the data leak could also have been prevented by taking safety measures. This involves securing the server, implementing good access rules and not leaving systems that do not require authentication open to the Internet.
According to NU.nl, it is not clear whether the Dutch were affected by the data breach. It is also not clear whether the leak has been abused.
This news article was automatically translated from Dutch to give Techzine.eu a head start. All news articles after September 1, 2019 are written in native English and NOT translated. All our background stories are written in native English as well. For more information read our launch article.
2 hours ago
