The financial data of millions of Americans including bank loans and mortgages have been leaked. This is reported by the generally well-informed news website TechCrunch. A database with these very sensitive items was not protected with a password.
It concerns more than 24 million documents that were probably accessible to everyone for two weeks. In that period a security researcher was able to find them. The documents were from the company Ascension, which provides data and analysis services to the financial sector. This company converts paper and paper documents into electronic documents.
The documents certainly went back to 2008. These were papers from Citigroup, HSBC Life Insurance, Wells Fargo, Capital One and various US government departments. Ascension says to inform all affected customers about the data breach. The company will also report the incident to regulators.