Comparitech, a British research firm, found online data for 20 million Russians. As reported on the website of the company, the database contained the personal information of citizens and data on taxes for the period from 2009 to 2016.
According to Comparitech, the information was stored on an unprotected Elasticsearch cluster owned by Amazon. Anyone could gain access to it without any authentication. According to Comparitech, the information was available for more than a year – from May 2018 to September 2019. The database kept information about tax payments, as well as personal information, including passport data, addresses, phone numbers and place of work.
After analysis, security specialist Bob Dyachenko said that the bulk of the information belonged to residents of Moscow. He personally warned the owner of the database. Comparitech did not disclose the owner of the base, but talked about communicating with Ukrainian citizens.
Comparitech also warned Muscovites that intruders who had time to familiarize themselves with the database could use the information obtained for fraud. They also suggested that organizations closely monitor the information of their customers.