India's National Logistics Portal-Marine has fixed security issues that exposed sensitive personal information and trade records. Security researcher Bob Diachenko discovered the issues, which were caused by misconfigured Amazon S3 buckets and a JavaScript file with login credentials in the source code. The exposed data included personal details and sensitive information such as invoices and shipping orders. The Indian Computer Emergency Response Team (CERT-In) confirmed the fix. The incident comes after India enacted the Digital Personal Data Protection Act, 2023. The Ministry and the company responsible for the portal did not comment on the issue.
Source: Link