Saccording to what was reported by CybernewsMoto.app, an application dedicated to motorcycle enthusiasts that allows you to plan trips, contact maintenance workshops and make purchases on a marketplace and much more would have accidentally exposed the data of thousands of users. This would not be sensitive data or critical information, nor has any data relating to members’ itineraries ever been accessible to third parties.
The company that owns the application confirmed that, on May 22, some documents containing non-sensitive information of a limited portion of its subscribers were accessible externally via a test environment in a non-proprietary cloud.
Apparently, as soon as it became aware of the critical issue, Moto.app promptly put in place a task force which proceeded to block any potential access from the outside.
At the moment there is no evidence that this data has been stolen, but only that it has been potentially accessible for a limited period of time.
The situation needs to be monitored, as the data exposed can be exploited by malicious actors with various purposes. “Although the social security number itself does not reveal detailed personal information, it can unlock access to official databases containing extensive personal, financial and health information. Unauthorized access or misuse of this code can lead to identity theft, fraud and privacy violations,” states the Cybernews team.
But the consequences don’t end there. Cybernews security experts claim that the data leak from Moto.app could represent a gold mine for bad actors. By matching home addresses with detailed information on motorcycle makes and models, criminals can locate high-value vehicles and attempt to steal them. “Furthermore, leaked license plate numbers can be used to create fake license plates on stolen motorcycles or used in other illegal activities, causing legal problems for the rightful owners,” security experts warn.
We will keep you updated on the matter.
Source: Wired
