Over 2.3 billion files exposed online<\/p>\n
Millions of files that are sitting out in the open across various file storage technologies are actually encrypted by ransomware<\/p>\n
By Tomas Foltyn, security writer at ESET<\/p>\n
More than 2.3 billion files have been found inadvertently exposed online over the past year, reads a report from threat intelligence outfit Digital Shadows.<\/p>\n
The firm\u2019s new \u2018Too Much Information: The Sequel\u2019 report follows up on the study\u2019s previous iteration, which found 1.5 billion files exposed between April 2017 and March 2018. The latest figure represents a 50-percent jump from the previous report.<\/p>\n
Beyond this, real estate insurance giant First American was found, just days ago, to expose a staggering\u00a0885\u00a0million files. But let\u2019s go back to Digital Shadows\u2019 report.<\/p>\n
How?<\/p>\n
As one might have expected, all that data found by Digital Shadows was sitting out in the open and for anybody to find because of misconfigured or non-secured file storage and sharing technologies. <\/p>\n
Around 46 percent of the files were exposed through Server Message Block (SMB) file shares, with their number (1.07 billion) actually doubling on an annual basis. File Transfer Protocol (FTP) and rsync servers follow on 20 percent and 16 percent, respectively.<\/p>\n
Amazon S3 buckets, which account for 8 percent of the total exposure, are in an interesting situation. On the one hand, hardly a month goes by without a widely publicized news report of a leaky Amazon S3 bucket, and Digital Shadows does say that the number of files exposed via this cloud service increased year-on-year.<\/p>\n
But this is also where the report is not all bad news, as it notes that the number of exposed files tumbled from millions to thousands after Amazon Web Services (AWS)\u00a0rolled out the \u2018Block Public Access\u2019 feature\u00a0in November 2018.<\/p>\n
What?<\/p>\n
Of course, it\u2019s not all about numbers, so what kind of files end up accidentally exposed? It varies, or, as the company puts it bluntly, \u201cnot all of them are blatantly sensitive, but there is plenty of gold in these mountains\u201d.<\/p>\n
Indeed, the analysis detected many files containing highly sensitive information. This includes enough data \u2013 such as that appearing in passports scans and bank statements \u2013 that is offered on a silver platter for\u00a0identity theft. Almost 5 million medical-related files, mostly imaging files such as x-rays and other medical scans, were also found exposed.<\/p>\n
Data leaks\u00a0from misconfigured public-facing file repositories may result in data theft and fraud, as well as penalties under the European Union\u2019s\u00a0General Data Protection Regulation\u00a0(GDPR).<\/p>\n
In addition, the data may also\u00a0fall victim to a malware attack. Indeed, more than 17 million of the files that Digital Shadows found were encrypted by ransomware.<\/p>\n","protected":false},"excerpt":{"rendered":"
Over 2.3 billion files exposed online Millions of files that are sitting out in the open across various file storage technologies are actually encrypted by ransomware By Tomas Foltyn, security writer at ESET More than 2.3 billion files have been found inadvertently exposed online over the past year, reads a report from threat intelligence outfit […]<\/p>\n","protected":false},"author":2,"featured_media":11144,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_yoast_wpseo_meta-robots-noindex":"1","_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","_pr_autopilot_social_copy":"","_yoast_wpseo_opengraph_title":"","_yoast_wpseo_opengraph_description":"","_yoast_wpseo_opengraph_image":"","_yoast_wpseo_opengraph_image_id":0,"_yoast_wpseo_twitter_title":"","_yoast_wpseo_twitter_description":"","_yoast_wpseo_twitter_image":"","_yoast_wpseo_twitter_image_id":0,"_yoast_wpseo_primary_category":0,"_extra_hide_author_box":"1","_extra_featured_post":"","_partner_post_id":0,"footnotes":""},"categories":[439],"tags":[],"class_list":["post-11145","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","et-has-post-format-content","et_post_format-et-post-format-standard"],"yoast_head":"\n