TLDR InfoSec · ATTACKS & VULNERABILITIES
3.5M EXPOSED IN COVID-19 E-PASSPORT LEAK
Summary from the TLDR InfoSec newsletter
A state in India required travelers to obtain a COVID-19 e-pass mandatory. Researchers recently discovered that this data was stored in an open S3 bucket. The leaked data includes names, passport numbers, gender information, mobile numbers, email addresses, travel details, and vehicle numbers.