Records of millions credit cards left unprotected by payments startup
By MYBRANDBOOK
According to news, New York-based payments startup left millions of credit card transaction records exposed for anyone to see on the internet for nearly three weeks before securing it. Security researcher Anurag Sen found the database belonging to card payments processor Paay, a news portal reported after alerting the company about the finding.
The database was pulled offline by Paay after it became aware of the issue. Paay co-founder Yitz Mendlowitz said that on April 3, they spun up a new instance on a service they are currently in the process of deprecating. An error was made that left that database exposed without a password.
To prevent fraudulent transactions, Paay verifies payments on behalf of selling merchants, but anyone could access the data inside because there was no password on the server. A review of a portion of the data base by the news portal revealed that each transaction contained credit card number and expiry date besides the amount spent, but as the data did not include names of the cardholder as well as card verification values, the exposure did not make it any easier for fraudsters to misuse it. Mendlowitz, however, said that his company does not store card numbers.
During this time, this kind of exposed credit card transaction records could have lead to a bigger crisis. If you remember, Google recently reported that in just one week from 6 to 13 April, it saw more than 18 million daily malware and phishing emails related to Covid-19 scams.
Also, Hackers are creating scam sites similar to COVID-19 relief packages. These scam websites use the news of the coronavirus financial incentives, and fears about coronavirus to try and trick people into using the websites or clicking on links. Check Point Researchers found that since January, a total of 4,305 domains relating to new stimulus/relief packages have been registered globally. In March 2020, a total of 2,081 new domains were registered -38 malicious and 583 suspicious. In the first week of April, 473 were registered – 18 malicious, 73 suspicious.
Nazara and ONDC set to transform in-game monetization with ‘
Nazara Technologies has teamed up with the Open Network for Digital Comme...
Jio Platforms and NICSI to offer cloud services to government
In a collaborative initiative, the National Informatics Centre Services In...
BSNL awards ₹5,000 Cr Project to RVNL-Led Consortium
A syndicate led by Rail Vikas Nigam Limited (abbreviated as RVNL), along wi...
Pinterest tracks users without consent, alleges complaint
A recent complaint alleges that Pinterest, the popular image-sharing platf...
TECHROUTES NETWORK PRIVATE LIMITED
PRAMA HIKVISION INDIA PRIVATE LIMITED
HAVELLS INDIA LTD.
TALLY SOLUTIONS PVT. LTD.
Icons Of India : Anil Agarwal
Anil Agarwal, the Founder and Chairman of Vedanta Resources Ltd., is r...
ICONS OF INDIA : SOM SATSANGI
With more than three decades in the IT Sector, Som is responsible for ...
Icons Of India : Harsh Jain
Harsh Jain, the co-founder of Dream 11, the largest fantasy sports web...
TCIL - Telecommunications Consultants India Limited
TCIL is a government-owned engineering and consultancy company...
PFC - Power Finance Corporation Ltd
PFC is a leading financial institution in India specializing in power ...
IFFCO - Indian Farmers Fertiliser Cooperative
IFFCO operates as a cooperative society owned and controlled by its fa...
Indian Tech Talent Excelling The Tech World - AJAY BANGA, President - World Bank
Ajay Banga is an Indian-born American business executive who currently...
Indian Tech Talent Excelling The Tech World - Dheeraj Pandey, CEO, DevRev
Dheeraj Pandey, Co-founder and CEO at DevRev , has a remarkable journe...
Indian Tech Talent Excelling The Tech World - Satya Nadella, Chairman & CEO- Microsoft
Satya Nadella, the Chairman and CEO of Microsoft, recently emphasized ...