August 27th, 2018 By Ionut Ilascu
A misconfigured MongoDB server belonging to Abbyy, an optical character recognition software developer, allowed public access to customer files.
Independent security researcher Bob Diachenko discovered the database on August 19 hosted on the Amazon Web Services (AWS) cloud platform. It was 142GB in size and it allowed access without the need to log in.
The sizeable database included scanned documents of the sensitive kind: contracts, non-disclosure agreements, internal letters, and memos.
There were more than 200,000 files from Abbyy customers who scanned the data and kept it at the ready in the cloud.
Powered by WPeMatico