PDA

View Full Version : Data on 198M voters exposed by GOP contractor



jimnyc
06-19-2017, 03:02 PM
It doesn't sound like it was compromised, but that's not the point, as it could easily have been. Why in the world is voter data being stored in an Amazon cloud? WTF? It's not exactly the most damaging information, as pretty much everything is of public record, other than having it in a nice little database. Idiots.

---

Data on 198M voters exposed by GOP contractor

A data analytics contractor employed by the Republican National Committee (RNC) left databases containing information on nearly 200 million potential voters exposed to the internet without security, allowing anyone who knew where to look to download it without a password.

"We take full responsibility for this situation," said the contractor, Deep Root Analytics, in a statement.

The databases were part of 25 terabytes of files contained in an Amazon cloud account that could be browsed without logging in. The account was discovered by researcher Chris Vickery of the security firm UpGuard. The files have since been secured.

Vickery is a prominent researcher in uncovering improperly secured files online. But, he said, this exposure is of a magnitude he has never seen before

"In terms of the disc space used, this is the biggest exposure I've found. In terms of the scope and depth, this is the biggest one I've found," said Vickery.

Rest here - http://thehill.com/policy/cybersecurity/338383-data-on-198-million-us-voters-left-exposed-to-the-internet-by-rnc-data

BoogyMan
06-19-2017, 09:31 PM
There really is no excuse for this. AWS provides options for encryption at rest as well as in flight. The data in a voter database is demographic in nature and most definitely falls under the umbrella of PII type data. These guys need to pay out the nose.