Lưu trữ — US — techcrunch
Tata Motors confirms it fixed security flaws, which exposed company and customerdata
Tata Motors has addressed significant security vulnerabilities that exposed sensitive customer and internal company data on its E-Dukaan e-commerce platform. A security researcher discovered flaws related to AWS data access, including personal customer information and proprietary internal reports. Tata Motors confirmed the issues have been fixed but did not disclose if affected customers were notified.
Điểm chính
- Eaton Zveare, a security researcher, discovered security flaws in Tata Motors' E-Dukaan unit, exposing sensitive data.
- The vulnerabilities included access to AWS keys, which allowed data modification and access to 70 terabytes of data.
- Exposed data comprised invoices with customer information, MySQL database backups, and Tableau account data for over 8,000 users.
- Zveare reported the flaws to Tata Motors and CERT-In in August 2023, and Tata Motors addressed the vulnerabilities but did not state when they were fixed.
- Tata Motors confirmed all reported issues were resolved and highlighted regular audits and collaboration with cybersecurity firms.
Vì sao quan trọng
- This incident reflects the ongoing challenge of data security in large corporations, especially with the increasing reliance on cloud services.
- By 2025, trends highlight a growing emphasis on cybersecurity measures in IT, prompting companies to strengthen their defenses and transparency with customers regarding data breaches.
- Similar security breaches in the automotive and tech sectors emphasize the need for continuous monitoring and response strategies to protect sensitive information.
In conclusion, Tata Motors' recent experience underscores the critical importance of cybersecurity in the modern digital landscape, highlighting the need for constant vigilance and proactive measures against potential threats.