. home.aspx



Canadian Telco Exposes Unencrypted Card Details

May 08, 2019 / Phil Muncaster

Canadian telco giant Freedom Mobile has become the latest big-name brand whose security has been found wanting after researchers discovered an unprotected database exposing over five million customer records. A research team at vpnMentor claimed to have discovered the Elasticsearch database online on April 17. It was left online with no password protection and none of the data was encrypted. Although the firm finally took action to address the issue a week later, the type of data left exposed to the public internet rang alarm bells with the researchers. It included email and home address, home and mobile phone numbers and dates of birth, but also unencrypted credit card and CVV numbers alongside credit score responses from Equifax and others. This could have provided cyber-criminals with a valuable trove of information with which to carry out a range of identity fraud. “An unencrypted database of personalized information is a valuable resource for hackers. Access to addresses, em...