Supplier Error Leaks Decade of Data from Carmakers

[dzvero]

Ridiculous how some people still have their jobs....

“Not all types of information were discovered for all customers, but each customer contained some data of these kinds. Also included are personal details of some Level One employees, including scans of driver’s licenses and passports, and Level One business data, including invoices, contracts, and bank account details.”

Even worse, the rsync server was publicly writable at the time the privacy snafu was discovered, meaning a malicious outsider could have altered the documents stored there or even uploaded malware.

https://www.infosecurity-magazine.co...r-error-leaks/