2022 EPFO — 280M records, unsecured Azure
Data compromised
UAN, Aadhaar, bank accounts, employment, income
Technical writeup
Unsecured Azure servers. 280M records on one IP, 8.4M on another. UAN, names, Aadhaar, bank accounts, IFSC, marital status, employment, income, nominee info. Taken down within 12h of disclosure.
Root cause
Unprotected server; misconfiguration