Cayman Islands investment fund left entire filestore viewable by world+dog in unsecured Azure blob

Gareth Corfield reports:

A Cayman Islands-based investment fund has exposed its entire backups to the internet after failing to properly configure a secure Microsoft Azure blob.

Details of the fund’s register of members and correspondence with its investors could be freely read by anyone with the URL to its Azure blob, the Microsoft equivalent of an Amazon Web Services S3 storage bucket.

Read more on The Register.

About the author: Dissent

Comments are closed.