Millions of personal data exposed by software

About 38 million Personal data and information Were made vulnerable to misalignment earlier this year
Software From
Microsoft Used by various companies and organizations. Some of this data comes from sites that detect Covit-19 contact cases.

Computer security firm Upcard on Monday released the account of the multi-month investigation.

47 groups are involved

Communities include 47 groups involving communities such as American Airlines, Ford, JP Hunt and the Maryland Health Authority and New York City Public Transportation. They typically use software from Microsoft, the Power App, which makes it easy to create websites and mobile applications to communicate with the public.

For example, if a company needs to quickly set up an appointment booking portal for vaccines, this service from the IT company provides both public interface and data management. But as of June 2021, the default software configuration did not adequately protect some data, Upcard researchers explain. “Thanks to our research, Microsoft has transformed the Power Apps portals,” they say.

Risk of not being adequately taken into account

A Microsoft spokesperson responded, “Our tools enable us to design solutions that meet a wide range of requirements. We take security and privacy seriously and encourage our customers to configure products to meet their privacy requirements.” The committee also pointed out that.

But according to Upcart, “it would be better to change the software based on the way customers use it than the widespread lack of data privacy, such as software problems and user misconfiguration that endangers the public.” Shows that it was not taken. “