2022 — Securitas, a leading security services provider of…

Securitas, a leading security services provider of on-site guarding and risk management, suffered a data breach, which exposed 1.5 million files. Based in Sweden and with branches throughout the world, Securitas provides a full suite of security services and products for corporate clients across various industries and employs more than 350,000 people in 48 markets. The data exposure, discovered by the cybersecurity team at SafetyDetectives, is believed to impact clients within Latin America in the aviation industry. One of the company’s Amazon S3 buckets was left open, exposing employee PII and sensitive company data of at least four airports in Colombia and Peru: El Dorado International Airport, Alfonso Bonilla Aragón International Airport, José María Córdova International Airport in Colombia and Aeropuerto Internacional Jorge Chávez in Peru. Other files may have exposed other airports. The SafetyDetectives team observed two primary databases containing the information of Securitas employees and airport employees, photos of ID cards and other unmarked images, including full names, pictures of employees, occupations and national ID numbers. The bucket contained: Device models of cameras used. GPS locations of photos (with coordinates and GPS maps). Times and date of photos. Unmarked photos also exposed the data of Securitas clients, airport employees and associated businesses.