A pair of misconfigured databases has exposed the tax records and personal information of 20 million Russians, Infosecurity Magazine reports. Analysts found the Amazon Web Services Elasticsearch cluster lacked password protection and an authentication mechanism. The unencrypted personal information, which was collected over a seven-year span and sat exposed for more than a year, included names, addresses, residency statuses, passport and phone numbers, tax ID numbers, and employer names and phone numbers.
Full Story