Stories
Slash Boxes
Comments

SoylentNews is people

OCR Software Dev Exposes 200,000 Customer Documents

posted by chromas on Thursday August 30 2018, @07:20AM   Printer-friendly
from the can-you-read-me-now? dept.

martyb writes:

Another week, another leak:

A misconfigured MongoDB server belonging to Abbyy, an optical character recognition software developer, allowed public access to customer files.

Independent security researcher Bob Diachenko discovered the database on August 19 hosted on the Amazon Web Services (AWS) cloud platform. It was 142GB in size and it allowed access without the need to log in.

The sizeable database included scanned documents of the sensitive kind: contracts, non-disclosure agreements, internal letters, and memos. Included were more than 200,000 files from Abbyy customers who scanned the data and kept it at the ready in the cloud.

"Some collection names like 'documentRecognition,' or 'documentXML' hinted that database would be part of a data recognition company infrastructure," Diachenko writes in a blog post today.

[...] Volkswagen, Deloitte, PwC, PepsiCo, Sberbank, McDonald's are just a few of Abbyy's clients.

Should have used invisible ink.

Original Submission

 
This discussion has been archived. No new comments can be posted.
OCR Software Dev Exposes 200,000 Customer Documents | Log In/Create an Account | Top | 10 comments | Search Discussion
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.

  • (Score: 1, Flamebait) by aristarchus on Thursday August 30 2018, @08:15AM (3 children)

    by aristarchus (2645) on Thursday August 30 2018, @08:15AM (#728201) Journal

    "MongoDB only pawn in game of stealing identities and targeting scams to the common clay of the old west, you know, morons"

    True stupidity is no excuse. Just consider jmorris, Runaround2096, and The Marginally Buzzidtorial. No excuses. Except profound ignorance. But even then, they should have known.

    Starting Score:    1  point
    Moderation   -1  
       Flamebait=2, Insightful=1, Total=3
    Extra 'Flamebait' Modifier   0  
    Karma-Bonus Modifier   +1  
    Total Score:   1  

  • (Score: 1, Touché) by Anonymous Coward on Thursday August 30 2018, @08:42AM (2 children)

    by Anonymous Coward on Thursday August 30 2018, @08:42AM (#728204)

    "MongoDB only pawn in game of stealing identities and targeting scams to the common clay of the old west, you know, morons"

    Poor old Mongo [youtube.com]

    True stupidity is no excuse. Just consider jmorris, Runaround2096, and The Marginally Buzzidtorial. No excuses. Except profound ignorance. But even then, they should have known.

    Where would this site be without constant childish insults from a genius alt-right fanboi like yourself?

    • (Score: 2, Informative) by aristarchus on Thursday August 30 2018, @09:46AM (1 child)

      by aristarchus (2645) on Thursday August 30 2018, @09:46AM (#728213) Journal

      Gee, I do not know! Perhaps you could tell us, oh enlightened one!

      • (Score: 0) by Anonymous Coward on Thursday August 30 2018, @11:51AM

        by Anonymous Coward on Thursday August 30 2018, @11:51AM (#728229)

        You tell us! [spiked-online.com] How's your journal and your ethics series coming along? As I recall, that was a positive contribution.