FormGet leaked hundreds of thousands of user-uploaded files
An Indian company named FormGet had an information leak. The company leaked sensitive files containing “hundreds of thousands” of user-uploaded files that dated as early as 2013. It is reported that the accident was caused by a misconfigured Amazon S3 bucket. An anonymous security researcher found that the company’s bucket did not set a password after networking.
The company’s leaked documents include: passports, driver’s license scans, paychecks, and scanned copies of social security numbers; bank account statements and utilities billing details, courier labels with names and phone numbers, and resumes with contact information and a network security assessment report from a number of banks and financial companies.
Based on existing information, FormGet provides online form creation and email marketing services to approximately 43,000 customers. People can use their tools to create forms such as job applications and online shopping.