Archive — US — techcrunch
Thousands of Indian bank transfer records found spilling online after securitylapse
A data breach from an unsecured Amazon cloud server exposed 273,000 sensitive bank transfer documents from Indian financial institutions, including account details and transaction info. Discovered by UpGuard, the leak affected 38 banks and persisted for days. Nupay, the source of the breach, claimed it was due to a configuration error and that the unreleased data posed no risk, though UpGuard disputes this.
Key points
- 1. Data Exposure: 273,000 sensitive bank transfer PDFs were found online.
- 2. Security Failure: The breach was due to an unsecured Amazon S3 storage bucket linked to Nupay.
- 3. 38 Affected Institutions: The exposed data came from 38 different banks and financial entities in India.
- 4. Discovery and Notification: UpGuard discovered the data, notifying the affected institutions, including Aye Finance and NPCI.
- 5. Conflicting Statements: Nupay claimed the data comprised mostly test files, but UpGuard said the majority contained real customer information.
- 6. Ongoing Risks: Even after the initial notification, additional files were being uploaded, raising concerns about system vulnerabilities.
Why it matters
- 1. Data breaches are becoming increasingly common in the financial sector, often due to human error and misconfigurations.
- 2. The rise of cloud computing requires organizations to implement stringent security measures to protect sensitive data.
- 3. By 2025, IT trends indicate a focus on enhancing cybersecurity frameworks and regulatory compliance in response to past breaches.
- 4. Similar incidents globally highlight the need for stronger governance and proactive data management practices in finance.
The exposure of sensitive banking data due to a cloud security lapse underscores the urgent need for improved cybersecurity measures in financial institutions and reflects ongoing challenges faced by the industry in managing sensitive information.