2019年9月24日

两个流氓员工电子商务服务提供商GoQuo被指责为一个安全漏洞,损害了个人数据Malindo空气和泰国狮子乘客,这是托管在Amazon Web服务的云平台。两个流氓员工马来西亚的电子商务服务提供商GoQuo背后的罪犯已经被确认为个人数据的安全漏洞,损害Malindo空气和泰国狮子乘客。马来西亚和泰国航空公司的子公司在印尼的廉价航空集团,狮子的空气。为基础的两名前雇员在GoQuo发展中心在印度和“不当访问,偷了”的个人资料航空公司的客户,说Malindo空气在最近的一系列语句关于违反。承运人表示,它已向警方报告了此事在马来西亚和印度。个人资料泄露的违反包括乘客的出生日期,护照号码和手机号码。Malindo空气称该事件是“不相关”的安全数据基础设施或它的云提供商,亚马逊网络服务(AWS)。马来西亚航空表示,该公司正与所有相关机构对于违约,包括马来西亚个人数据保护专员和国家网络安全机构。Malindo空气表示已经订婚数据取证和网络安全专家检查现有数据基础设施和流程。承运人没有说有多少客户安全漏洞的影响,但各种报告数量从2100万年到3000万年,包括泰国狮子乘客。 In a previous statement to ZDNet, an AWS spokesperson said its services and infrastructure "worked as designed and were not compromised in any way". "Neither the use of cloud services nor the geographic location of the data had any bearing on the issue," it added, but declined to reveal where the AWS servers containing Malindo Air's data resided or whether the airline had given specific instructions on where its data should be stored. Commenting on the breach, HackerOne's IT head Aaron Zander said: "Leaving a server exposed without any protection is one of the most basic and embarrassing security failings, but these breaches still continue to happen across the board. When it comes to securing the data of ever more informed consumers, the basics of security need to be covered at a minimum. "When moving such data to a cloud environment, maintaining an understanding who is accessing what and when is key so the risk of unauthorised access is minimised," Zander said. "Modern engineering teams have many people who can improve on your infrastructure and security, but equally as many people can make a mistake. Continued testing and checks help keep everyones data safe, especially your customers."