25 May Software Startup Leaks Insurance Data of Customers
Earlier this week, a software startup called AgentRun had reportedly exposed highly sensitive insurance policy data by leaving its Amazon S3 storage bucket completely open and unsecured without a password.
Run by Chicago-based ex-independent insurance broker Andrew Lech, the startup kept thousands of files of broker clients including insurance policy documents, identification documents, health and medical information, and some financial data.
Lech admitted the breach in the email, saying that the permissions on the bucket got flipped during a migration. The company promised to notify the authorities and those affected by the breach.