Records of millions credit cards left unprotected by payments startup


By MYBRANDBOOK


Records of millions credit cards left unprotected by payments startup

According to news, New York-based payments startup left millions of credit card transaction records exposed for anyone to see on the internet for nearly three weeks before securing it. Security researcher Anurag Sen found the database belonging to card payments processor Paay, a news portal reported after alerting the company about the finding.

 

The database was pulled offline by Paay after it became aware of the issue. Paay co-founder Yitz Mendlowitz said that on April 3, they spun up a new instance on a service they are currently in the process of deprecating. An error was made that left that database exposed without a password.

 

To prevent fraudulent transactions, Paay verifies payments on behalf of selling merchants, but anyone could access the data inside because there was no password on the server. A review of a portion of the data base by the news portal revealed that each transaction contained credit card number and expiry date besides the amount spent, but as the data did not include names of the cardholder as well as card verification values, the exposure did not make it any easier for fraudsters to misuse it. Mendlowitz, however, said that his company does not store card numbers.

 

During this time, this kind of exposed credit card transaction records could have lead to a bigger crisis. If you remember, Google recently reported that in just one week from 6 to 13 April, it saw more than 18 million daily malware and phishing emails related to Covid-19 scams.

 

Also, Hackers are creating scam sites similar to COVID-19 relief packages. These scam websites use the news of the coronavirus financial incentives, and fears about coronavirus to try and trick people into using the websites or clicking on links. Check Point Researchers found that since January, a total of 4,305 domains relating to new stimulus/relief packages have been registered globally. In March 2020, a total of 2,081 new domains were registered -38 malicious and 583 suspicious. In the first week of April, 473 were registered – 18 malicious, 73 suspicious.

 E-Magazine 
 ICONS OF INDIA  Placeholder image

Icons Of India : NANDAN NILEKANI

Nandan Nilekani is the Co-Founder and Chairman of Infosys Technologies...

Icons Of India : Anil Agarwal

Anil Agarwal, the Founder and Chairman of Vedanta Resources Ltd., is r...

ICONS OF INDIA : VINAY SINHA

Vinay Sinha is the Managing Director of Sales for the India Mega Regio...

 VIDEOS  Placeholder image
 ITFORUM 2025  

 STARNITE AWARDS 2024  

   



 CMO of the Year   Placeholder image

 WOMEN LEADERSHIP  Placeholder image

 IMAGE GALLERY   Placeholder image

 TRENDS IN TECHNOLOGY  Placeholder image

MORE VIDEOS  Placeholder image
 ADVERTISEMENTS  Placeholder image
Brandbook Brandbook

 TECHNOLOGY DISRUPTION Placeholder image


 UNICORNS REVOLUTIONISING Placeholder image




Copyright www.mybrandbook.co.in @1999-2025 - All rights reserved.
Reproduction in whole or in part in any form or medium without express written permission of Kalinga Digital Media Pvt. Ltd. is prohibited.
Other Initiatives : www.varindia.com | www.spoindia.org
of images belongs to the respective copyright holders