An unsafe repository, a data storage bucket of Amazon Web Services S3, was discovered by Chris Vickery, cyber risk research manager at cyberspace UpGuard. The container is configured for public access, indicating that anyone who knows the field can view the contents of the database including a resume, found on a subdomain named "tiger resume."
Thousands of people are openly exposed to difficult personal information and very detailed service records from defense and intelligence veterans. Forms often include contact information including home address, phone number, and email address.
They also combine work histories, which often reveal sensitive information like SIM numbers, passport numbers, Social Security numbers and in unusual cases even security clearances. There are 295 candidates claiming a "Top Secret / Sensitive Compartmented Information" and one candidate with permission above the secret level.
Military officers are also shown in the applicant's source. The contact details of former US ambassador to Indonesia and the director of the CIA's prior secret service are among the reference reference sections.
While many resumes are from US military experts, the warehouse also includes statements from Iraqis and Afghans who work with US forces, contractors and government agencies working in their home country.
Disclosure of personal details of foreign nationals in charge of US troops may harm people in their own country. That's the case with translators and editors promised US visas in trade to help the US military but not hold them at the right time. Vital donors to military operations live in fear of retaliation from combat troops in their home country.
Take your time to comment on this article.