KPMG red-faced after being found with data leak

By

Follows release of name-and-shame report.

Sensitive data has been found on KPMG's website soon after the consultancy released a report revealing blue chip companies doing the same.

KPMG red-faced after being found with data leak

Security researcher Robin Wood found 400 email addresses, 164 users and 112 PC names along with printers, software versions and  "quite a lot of internal directories" on the US KPMG site.

He said the consultancy was running IIS servers on version 6, two versions out of date.

KPMG had earlier reported that every company on the FTSE 350 Index list had left employee usernames, email addresses and sensitive internal file location information online.

It said an average of 41 usernames, 44 email addresses and five sensitive internal file locations were available from each company.

A spokesperson for the consultancy said it audited its own site along with those in the report.

"We recognise that many websites provide some level of data leakage and with this in mind, the purpose of our report is to highlight concerns so they can be dealt with, rather than highlight individual weak spots."

This article originally appeared at scmagazineuk.com

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, UK edition
Tags:

Most Read Articles

Travel eSIMs secretly route traffic over Chinese and undisclosed networks: study

Travel eSIMs secretly route traffic over Chinese and undisclosed networks: study

"Widespread data theft" hits Salesforce customers via third party

"Widespread data theft" hits Salesforce customers via third party

Attackers weaponise Linux file names as malware vectors

Attackers weaponise Linux file names as malware vectors

Home Affairs adds SecOps to new cyber risk overhaul

Home Affairs adds SecOps to new cyber risk overhaul

Log In

  |  Forgot your password?