Database of 8bn Thai Internet Records Exposed in Major Data Breach
A subsidiary of Thailand’s largest cell network, Advanced Info Service (AIS), has made a database containing real-time internet records of millions of customers available online in a major data breach.
The information was released in May during a test scheduled by the company, who claim that no important data was made available. The database has now been made inaccessible.
In a blog post, security researcher Justin Paine discussed the database, saying that the information could help anyone to “quickly paint a picture” of what someone may be doing online in real-time.
Paine commented: “Over the course of the roughly three weeks the database has been exposed the volume of data has been growing significantly. The database was adding approximately 200 million new rows of data every 24 hours.
“To be precise, as of May 21st, 2020: 8,336,189,132 documents were stored in the database. This data was a combination of NetFlow data and DNS query logs.”
Paine says he alerted AIS of the breach May 13, but after the company failed to act, reported to Thailand’s national computer emergency response team, known as ThaiCERT.
AIS admits that there was a security lapse on its systems but insists that no important information was exposed in the data breach.
Recommended
AIS spokesperson Sudaporn Watcharanisakorn commented: “We can confirm that a small amount of non-personal, non-critical information was exposed for a limited period in May during a scheduled test.
“All of the data related to Internet usage patterns and did not contain personal information that could be used to identify any customer.
“On this occasion, we acknowledge that our procedures fell short, for which we sincerely apologise.”
The company says it will continue to review its security measures.
This latest breach of data is continuing to become a common theme amongst large organisations worldwide who fail to ensure cybersecurity measures are put in place to protect users.
In recent months, companies such as Virgin Media, Marriott Hotels and EasyJet have suffered major breaches on their systems, exposing the data of millions of their customers.
Related
!function(f,b,e,v,n,t,s)
{if(f.fbq)return;n=f.fbq=function(){n.callMethod?
n.callMethod.apply(n,arguments):n.queue.push(arguments)};
if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0';
n.queue=[];t=b.createElement(e);t.async=!0;
t.src=v;s=b.getElementsByTagName(e)[0];
s.parentNode.insertBefore(t,s)}(window,document,'script',
'https://connect.facebook.net/en_US/fbevents.js');
fbq('init', '485941541567778');
fbq('track', 'PageView');
(function(d, s, id) {
var js, fjs = d.getElementsByTagName(s)[0];
if (d.getElementById(id)) return;
js = d.createElement(s); js.id = id;
js.src = "https://connect.facebook.net/en_GB/sdk.js#xfbml=1&version=v2.8";
fjs.parentNode.insertBefore(js, fjs);
}(document, 'script', 'facebook-jssdk'));
Source link
Gloss