Tax and PII records of 20 million Russians stored without encryption, leaked online

Over 20 million tax records belonging to Russian citizens were left unprotected and exposed through an online database accessible to the public, researchers say.

This week, cybersecurity researchers from Comparitech, in partnership with Bob Diachenko, said that the unsecured server contained highly sensitive information spanning from 2009 to 2016.

The Amazon Web Services (AWS) Elasticsearch cluster, which was not protected by any form of credential requirements or overall encryption, exposed Personally Identifiable Information (PII) belonging to Russian nationals.

Read more…
Source: ZDNet