Nostr notes by Chum1ng0 - Security Research :verified:

UPDATE: The Gestiona Tu Visa LLC server that exposed 67 GB of ...

2026-08-26T21:57:22Z

UPDATE:

The Gestiona Tu Visa LLC server that exposed 67 GB of immigrant data (DS-160 forms, contracts, and passports) is no longer exposed.

On August 18, 2026, I contacted GoDaddy, and they confirmed that they have deactivated the services.

#cybersecurity #databreach #dataprotection #privacy

https://www.security-chu.com/2025/11/Gestiona-Tu-Visa-expone-67GB-de-Inmigrantes.html

Another day of closed data breach: 🇦🇪 Today we're ...

2025-12-12T02:34:09Z

Another day of closed data breach:

🇦🇪 Today we're talking about a commercial enterprise located in the United Arab Emirates. This information came from an IT service provider for Dubai Duty Free called touchworldtechnology.

Dubai Duty Free (DDF) is a retail operation at Dubai International Airport (DXB) and Al Maktoum International Airport (DWC), recognized worldwide as one of the largest and most successful duty-free shops in the world.

What data was exposed?

An open directory containing 90GB of information was exposed at the time, likely due to an error or misconfiguration.

While reviewing the folders, I found data that shouldn't have been publicly exposed. According to my information, this data had been exposed since the beginning of the year. I discovered it in early September, so imagine how long it had been exposed.

What files did that open directory contain?

At first, I saw Excel spreadsheets, invoices, test invoices—irrelevant things—but as I continued, I saw passports -id cards, which started to worry me. I also saw an env file containing the entire MySQL database configuration with its username and password, as well as the configuration of the bucket on digitaloceanspaces.com with its access key and secret.

So, someone backup the bucket and left it exposed?.

Notification:

I sent an email to DDF on September 3rd warning them about this situation. When I saw that no one responded, I sent an email to the AE Computer Emergency Response Team (AECERT) on September 5th. No one replied, but on September 10th, I received an email thanking me for my concern and saying they would forward the email to the appropriate department.

This was closed on September 13th, according to my follow-up.

#cybersecurity #AE #databreach #infosec

Dissent Doe :cupofcoffee: (npub17l5…4kr3)

Another day of closed data breach: 🇱🇰 This time it's a ...

2025-12-05T21:12:42Z

Another day of closed data breach:

🇱🇰 This time it's a Sri Lankan insurance company, Continental Insurance Lanka Limited (https://cilanka.com), which has 58 branches across Sri Lanka. This extensive branch network is designed to provide close and convenient service to its customers nationwide.

Continental Insurance offers a wide range of personal and business insurance solutions.

Personal Insurance

Motor Vehicle Insurance
Health Insurance
Home Insurance
Travel Insurance

Business Insurance

Fire and Property Insurance
Engineering Insurance
Marine and Cargo Insurance
Liability Insurance
Employee-Related Insurance

This insurer exposed an open directory of 1.70GB in size with data in XLSX and JSON formats. This was exposed from the beginning of 2025—imagine how long it was exposed.

Among the exposed data were files called "claims" in JSON format. This reviewed file contained 3,657 medical insurance claim records.

What data do the files contain?

Employee/Patient, Internal CEA Reference, Reason for consultation,
Claim Type, Claimed Amount, Amount Not Paid, Amount Finally Paid, Consultation Date, Date the Insurance Company Was Notified, Payment Date, Hospital/Clinic, Check Number, Status.

But where were the insured parties in this file from?

From the Central Environmental Authority (CEA), https://www.cea.lk, the leading institution for environmental protection and management in the country.

Notification:

I notified the company on November 2nd via email to inform them of the situation and the information I was providing.

This matter was closed on November 5th without a response from the insurer.

I also didn't see any announcement on their website warning about this situation. Did the insurer notify the CEA (Central Environmental Authority of Sri Lanka) about the information I provided? We don't know, and we won't know, since no one responded to my emails.

#cybersecurity #Srilanka #insurance #databreach #government #infosec

Dissent Doe :cupofcoffee: (npub17l5…4kr3)