← FedEx

2017 — FedEx: Personal information of thousands of FedEx…

2017 119.0K records affected Share on X

Data compromised

Personal information

Technical writeup

Personal information of thousands of FedEx customers worldwide was exposed on the web due to an Amazon Web Services (AWS) cloud storage server which was not secured with a password. Security researchers from Kromtech Security found the open AWS bucket which contained 119,000 scanned documents, including passports, drivers’ licenses and Applications for Delivery of Mail Through Agent forms, which contain names, home addresses, phone numbers and ZIP codes.

Root cause

Unintended disclosure

References