Debt Collection: How an Unsecured ElasticSearch Instance Exposed Thousands of Borrowers | UpGuard

UpGuard can now report an ElasticSearch instance used as data storage for the debt collection system ENCollect has been secured. The server contained data about loans from multiple Indian and African financial services companies that had apparently been sent to ENCollect for collection. The data totalled 5.8GB in storage size and contained a total of 1,686,363 records. Those records included personal information like name, loan amount, date of birth, account number, and more.

Source: https://www.upguard.combreaches/encollect