Formget security lapse exposed thousands of sensitive user-uploaded documents

Zack Whittaker reports:

If you’ve used Formget in the past few years, there’s a good chance we know about it.

Formget bills itself as an online form maker and email marketing company based in Bhopal, India. The company allows its 43,000 customers to create online forms so others can submit their resumes or apply for a job, or provide proof of address or employment, buy goods online, and more.

How do we know? Because the company left one of its cloud storage servers online and exposed without a password.

A security researcher who asked not to be named found Formget’s exposed Amazon S3 storage bucket and informed TechCrunch in the hope of getting the data secured. Formget pulled the bucket offline overnight after we reached out to the company on Wednesday. But the company’s founder and chief executive Neeraj Agarwal did not respond to several emails and follow-ups requesting comment.

Read more on TechCrunch.

About the author: Dissent

Comments are closed.