Sensitive data of Indian pension fund holders exposed online

A huge cache of data containing the full name, bank account number and nominee information of pension fund holders in India has surfaced online.
Security researcher Bob Diachenko found two separate IP addresses storing over 288 million records — with some 280 million records available under one IP address and about 8.4 million were a part of the second IP address. Both IP addresses were publicly exposing the data to the internet but were not protected by passwords, the researcher said.
The records were a part of cluster indices titled “UAN”, which apparently refers to the Universal

リンク元