Taxi software biz iCabbi recently fixed an issue that exposed the personal information of nearly 300,000 individuals via an unprotected database.
The names, email addresses, phone numbers, and user IDs of the 287,961 affected individuals in the UK and Ireland were all exposed online. According to research shared with The Register ahead of publication, the details of individuals with senior roles in media outlets such as the BBC and various government departments such as His Majesty’s Treasury, the UK Home Office, and the Ministry of Justice were included.
A number of former UK Members of Parliament (MPs), as well as one senior policy advisor and one EU ambassador, were caught up in the data exposure, it’s understood.
Taxi software vendor exposes personal details of nearly 300K
Submitted 3 months ago by Emperor@feddit.uk to unitedkingdom@feddit.uk
https://www.theregister.com/2024/04/11/icabbi_database_exposure/?td=rt-3a
autotldr@lemmings.world [bot] 3 months ago
This is the best summary I could come up with:
Exclusive Taxi software biz iCabbi recently fixed an issue that exposed the personal information of nearly 300,000 individuals via an unprotected database.
According to research shared with The Register ahead of publication, the details of individuals with senior roles in media outlets such as the BBC and various government departments such as His Majesty’s Treasury, the UK Home Office, and the Ministry of Justice were included.
Such data could theoretically be used in convincing phishing scams that impersonate the taxi company, using the victim’s full name and appearing legitimate by knowing other details, including their user IDs.
The company also offers software such as BookBusiness to more easily manage account-based customers, BookVoice for automated voice booking, and a suite of driver apps for things like navigation and in-car payments.
Fowler thinks the database was a content management storage repository used by the application for various documents which also included terms and conditions files alongside customer data.
iCabbi didn’t respond to El Reg’s repeated requests for comment, but it did tell Fowler that human error was the cause of the security snafu, as is so often the case.
The original article contains 805 words, the summary contains 187 words. Saved 77%. I’m a bot and I’m open source!