SPTrans: almost 37 million sensitive data exposed

 SPTrans is the company responsible for the operation of public transport in the capital of São Paulo, having a gigantic database and information.


Now, imagine if a breach in the security of that organization were made public, available to cybercriminals? It would be a great disaster!


And that is exactly what happened. On August 8, 2020, a report was made public about a flaw in the company's security system, where anyone could access the sensitive data of the users of the single ticket - card used to pay for transportation.


The exposed data contained: photos and registration data (CPF and RG), full physical address, affiliation, sex, telephone, date of birth, place of birth and marital status of almost 37 million users .


This failure, in addition to undermining the integrity, availability and confidentiality, which are basic principles of information security, violates the requirements of the LGPD - General Data Protection Law , which determines the obligation of companies to guarantee privacy for their data. customers.

Dell SonicWall Support Engineers must have the analytical skills to determine the right course of action to resolve issues, such as encrypted threats and ransomware attacks. They provide both team members and clients the status of the problems and the plan of action they will undertake. The position requires a customer-oriented mindset at all times.

In a note, the company positioned itself stating:


"SPTrans informs that, due to the complaint made, it has already asked the company responsible for the data center to investigate the matter as a matter of urgency".


However, the consequences of this disaster are the most diverse, since the possibilities of fraud, scams, thefts and attacks using this data are numerous.

Comments

Popular posts from this blog

Is Windows 10 1909 Now Close?

Is it worth taking a free English proficiency test?

DDoS Attacks: Growing?