09 Jan Real-time Location Data of Indian Transportation Agencies Exposed Online
Security researcher Justin Paine revealed this week that he had found an unprotected ElasticSearch server which contained real-time GPS coordinates and bus route information from 27 transportation agencies in India.
Paine said that the collected data was different for each transportation agency. Some servers for bus companies had license plates, start-stop stations, route names, and GPS coordinates, but some included details about commuters, such as usernames and emails.
Paine also revealed that the server had been secured after he informed India’s CERT team. However, CERT India declined to say who the server belonged.