OVER 290K CITIZENS AT RISK: CLOUDSEK UNCOVERS MAJOR DATA BREACH AT BANGALORE WATER SUPPLY AND SEWAGE BOARD

Summary from the TLDR InfoSec newsletter

CloudSek's digital risk monitoring platform found a forum post selling root access to the Bangalore Water Supply and Sewage Board's database. This was traced to a publicly accessible .env file with plaintext MySQL credentials and an exposed Adminer interface. The database holds over 290,000 user records, including full name, phone number, address, Aadhaar number, and email address.