2022 Pikas (Malaysia) — 2,000 Excel files, 1.7M+ records on MITI site
Data compromised
Company names; NRIC/passport numbers; phone numbers; employee roles
Technical writeup
Malaysia vaccination programme. ~2,000 Excel files with 1.7M+ personnel records directly downloadable from MITI website. Exposed: company names, NRIC/passport numbers, phone numbers, employee roles. Files left publicly accessible without password. Former deputy minister Ong Kian Ming demanded explanation.
Root cause
IT security flaw; publicly accessible files