Information Security News mailing list archives

Someone's in hot water: Tea party super PAC group 'spilled 500, 000+ voters' info' all over web


From: InfoSec News <alerts () infosecnews org>
Date: Thu, 18 Oct 2018 06:36:04 +0000 (UTC)

https://www.theregister.co.uk/2018/10/17/republican_tea_party_fund_security_blunder/

By Chris Williams
Editor in Chief
The Register
17 Oct 2018

Now, now, America. Don't go overboard. Again.

More than half a million folks' names and phone numbers, plus other sensitive files, were accidentally spilled onto the internet by a misconfigured server operated by the Tea Party Patriots Citizens Fund, it is claimed.

That fund is a Republican super PAC that campaigned in the 2016 presidential elections, backed Alabama’s Roy Moore and New Jersey’s Jay Webber, and supported other rightwing activities. As a political action committee, its job was to raise money from supporters, call people to swing their vote to Donald Trump, run ads, push conservative agendas, and so on – ultimately helping the biz celeb win the White House race.

According to infosec biz Upguard earlier today, the fund exposed names, contact numbers, states of residence, and voter ID numbers for more than 527,000 people, as well as strategy documents, marketing assets, and other files used to fire up voters to the open internet. Specifically, the 2GB of data was left in a, you guessed it, misconfigured Amazon Web Services S3 bucket, it is claimed.

[...]

--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
https://twitter.com/infosecnews_

Current thread: