540,000 Vehicle Identification Numbers Leaked

Personal credit hacked! Vehicle tracking login credentials leaked! Bits and bytes of data on servers have one caveat-100 percent secure?  There are human errors that contribute to online leaks, and situational training may identify specific errors. Stolen Vehicle Records (SVR) Tracking Company data was left unsecured on an Amazon AWS S3 Bucket.  SVR’s cloud-based servers are collecting real-time data every second of the day.   What is a cloud-based server?  A cloud server is a logically built server, hosted and delivered through a cloud computing platform over internet, exhibiting similar capabilities and functionalities of a remotely controlled typical server from a cloud service provider according to Techopedia.  On September 20, 2017, Kromtech notified SVR of a mis-configuration, resulting in a vulnerable data repository.

Resources:
Cameron, D. “Passwords to Over a Half Million Car Devices Leaked Online.” Gizmodo, 15 September 2017, https//gizmodo.com/passwords-to-access-over-a-half-million-car-tracking-de-1818624272. Accessed 29 September 2017. GitHub, Inc. https://github.com/vz-risk/VCDB/issues/10097.  Accessed 08 September 2017.
Diachenko, B. “Auto Tracking Company Leaks Hundreds of Thousands of Records Online.” MacKeeper,  21 September 2017,  https//mackeepersecurity.com/post/auto-tracking-company-leaks-hundreds-of-thousands-of-records-online. Accessed 04 October 2017.
Paganini, P. “Passwords and much more for 540,000 SVR Tracking accounts leaked online.” Security Affairs, 24 September 2017, http//securityaffairs.co/wordpress/63343/data-breach/svr-tracking-data-leak.html. Accessed 29 September 2017.
SVR. “Security Incident Response from SVR.” SVR, http//www.svrtracking.com/security-incident-response.html Accessed 04 October 2017.
Techopedia. “Cloud Servers.” Techopedia,  https//www.techopedia.com/definition/29019/cloud-server. Accessed 04 October 2017.

Leave a comment