Phone : +91 9582 90 7788 | Email : sales@itmonteur.net

Register & Request Quote | Submit Support Ticket

Home » Cyber Security News » Unprotected MongoDB database exposes 6.7 million records belonging to Iranian ride-hailing firm

Unprotected MongoDB database exposes 6.7 million records belonging to Iranian ride-hailing firm

  • The leaky database that exposed records on the internet, contained two sets of invoice collections.
  • The information leaked in the incident included drivers’ first and last names, Iranian ID numbers, phone numbers, and invoice dates.

An Iran-based ride-hailing firm has exposed over 6.7 million records due to an unprotected MongoDB database. The leaky database named ‘doroshke-invoice-production’ was discovered using BinaryEdge search engine.

What did the leaky database contain – The leaky database that exposed records on the internet, contained two sets of invoice collections – the first set dating back to 2017 and the second set was from 2018. While the first set which went by the name ‘invoice95’ included 740, 952 records, the second set named ‘invoice96’ contained 6,031,317 records.

The information leaked in the incident included drivers’ first and last names, Iranian ID numbers, phone numbers, and invoice dates.

Security researchers Bob Diachenko notes that the number of Iranian drivers potentially impacted by the exposure can be low as the database contains many duplicate sets of data.

“Please note that the total number of records might not be representative of the total number of affected people, since there could be duplicates (I am still analyzing the samples), but from what I’ve seen, each record was unique. I have recorded duplicates in the dataset, so the estimated number of unique entries is about 1-2 Million,” Diachenko explained.

What actions have been taken – The researcher has informed the Iranian CERT about the incident. In addition, Diachenko has also contacted researchers in Iran to determine who should be alerted of the situation.

“We were able to get in touch with a couple of drivers with an attempt to identify the owner of the database. At the same time, my colleagues have reached out to the biggest ride-hailing companies in Iran to confirm data origin,” Diachenko wrote in a blog post.

Soon after the discovery, the researcher also contacted the ride-hailing firms in Iran. The unsecured database has been secured and is no longer accessible on the internet.

Information Security - InfoSec - Cyber Security - Firewall Providers Company in India

 

What is Firewall? A Firewall is a network security device that monitors and filters incoming and outgoing network traffic based on an organization's previously established security policies. At its most basic, a firewall is essentially the barrier that sits between a private internal network and the public Internet.

 

Secure your network at the gateway against threats such as intrusions, Viruses, Spyware, Worms, Trojans, Adware, Keyloggers, Malicious Mobile Code (MMC), and other dangerous applications for total protection in a convenient, affordable subscription-based service. Modern threats like web-based malware attacks, targeted attacks, application-layer attacks, and more have had a significantly negative effect on the threat landscape. In fact, more than 80% of all new malware and intrusion attempts are exploiting weaknesses in applications, as opposed to weaknesses in networking components and services. Stateful firewalls with simple packet filtering capabilities were efficient blocking unwanted applications as most applications met the port-protocol expectations. Administrators could promptly prevent an unsafe application from being accessed by users by blocking the associated ports and protocols.

 

Firewall Firm is an IT Monteur Firewall Company provides Managed Firewall Support, Firewall providers , Firewall Security Service Provider, Network Security Services, Firewall Solutions India , New Delhi - India's capital territory , Mumbai - Bombay , Kolkata - Calcutta , Chennai - Madras , Bangaluru - Bangalore , Bhubaneswar, Ahmedabad, Hyderabad, Pune, Surat, Jaipur, Firewall Service Providers in India

Sales Number : +91 9582 90 7788 | Support Number : +91-9654016484
Sales Email : sales@itmonteur.net | Support Email : support@itmonteur.net

Register & Request Quote | Submit Support Ticket