Security News > 2020 > April > RigUp Database Exposed 76,000 Files From U.S. Energy Sector

RigUp Database Exposed 76,000 Files From U.S. Energy Sector
2020-04-10 11:45

An exposed Amazon Web Services S3 bucket belonging to RigUp was found to expose tens of thousands of private files belonging to organizations and individuals in the U.S. energy sector, vpnMentor reports.

Founded in 2014, United States-based RigUp is a labor marketplace and services provider for the country's energy sector.

The software company connects independent contractors with companies across the U.S. The discovered database contained over 76,000 private files pertaining to both companies and individuals using the platform, vpnMentor says.

On March 10, the security firm discovered the exposed S3 bucket, which was labeled "Ru", and which contained many files featuring RigUp's name, thus allowing for a quick identification of the owner.

Human resources-related files found in the database included employee and candidate resumes, personal photos, paperwork and IDs related to insurance policies and plans, professional IDs, profile photos, and scans of professional certificates in different fields.


News URL

http://feedproxy.google.com/~r/Securityweek/~3/2KhTFJOprx0/rigup-database-exposed-76000-files-us-energy-sector