TechCrunch reports data security professionals discovered more than 288 million exposed records belonging to pension fund holders in India. Full names, bank account numbers and nominee information were among the data potentially accessed when two databases were left open without a password. "From what I understood, information from the database could have been used to put together a complete profile of an Indian citizen and make them a target for a phishing or scamming attack," researcher Bob Diachenko said.
Full Story