Another incident to remind us that our vendor/contractor's security practices are part of our security - One of American Express (India) subcontractor missed to encrypt 700,000 customer records , exposing names, email addresses, phone numbers and card type.

The bulk of the data – more than 2.3 million records – it housed was encrypted, requiring an encryption key but the nearly 700,000 customer records were in plaintext, exposing names, email addresses, phone numbers and card types.
the database was not managed by AmEx itself but instead by one their subcontractors who were responsible for SEO or lead generation.

Sensitive information is left publicly available in a data repository due to poor developer practices

https://www.scmagazine.com/home/security-news/leaky-mongodb-server-exposes-personal-info-on-700k-amex-india-customers/

Wikileaks has internal leaks - Confused ? - An activist has just leaked 11,000 direct messages from a Twitter group used by WikiLeaks, an organization that's been known to publishing others' secret.

More than 11,000 direct messages from a Twitter group used by WikiLeaks and around 10 close supporters have been posted online by journalist and activist Emma Best, exposing private chats between 2015 and 2017.

The leaked chats have been referenced by American media outlets earlier this year, but for the very first time, all 11,000 messages have been published online, allowing anyone to scroll through and read messages themselves.

he leaked DMs of the private Twitter chat group, dubbed "Wikileaks +10" by Best, show WikiLeak's strong Republican favoritism, as some portions of the previously leaked chats already showed WikiLeaks' criticism of Hillary Clinton and support for the GOP.



https://thehackernews.com/2018/07/wikileaks-twitter-chats.html

Do you know how much information is in your Boarding Pass?

What you don't know CAN (sometimes) hurt you

From the article:

Besides his name, frequent flyer number and other [personally identifiable information], I was able to get his record locator (a.k.a. “record key” for the Lufthansa flight he was taking that day,” Cory said. “I then proceeded to Lufthansa’s website and using his last name (which was encoded in the barcode) and the record locator was able to get access to his entire account. Not only could I see this one flight, but I could see ANY future flights that were booked 

The information contained in the boarding pass could make it easier for an attacker to reset the PIN number used to secure his friend’s Star Alliance frequent flyer account. 

Fore more info:

http://krebsonsecurity.com/2015/10/whats-in-a-boarding-pass-barcode-a-lot/