India’s national logistics portal exposed sensitive personal data, trade records - TechCrunch

India's National Logistics Portal-Marine has fixed misconfigurations and vulnerabilities that exposed sensitive personal data and trade records. The website made the data public due to misconfigured Amazon S3 buckets and also included login credentials in the web source code. The exposed data included personal information of crew members, invoices, shipping orders, and bills of lading. Security researcher Bob Diachenko discovered the issues and notified the Indian Computer Emergency Response Team (CERT-In). The fix was confirmed by CERT-In on Friday. The incident comes just after India received its anticipated privacy law, but exempts the government from legal obligations.

Source: Link