38M Records Were Exposed Online—Including Contact-Tracing Info

Image caption: The exposed data was all stored in Microsoft’s Power Apps portal service, a development platform that makes it easy to create web or mobile apps for external use. Image: Jorg Greuel / Getty Images. Article by Lily Hay Newman. Wired – August 23, 2021.

Misconfigured Power Apps from Microsoft led to more than a thousand web apps accessible to anyone who found them.

More than a thousand web apps mistakenly exposed 38 million records on the open internet, including data from a number of Covid-19 contact tracing platforms, vaccination sign-ups, job application portals, and employee databases. The data included a range of sensitive information, from people’s phone numbers and home addresses to social security numbers and Covid-19 vaccination status. […]

Click here to view original web page at www.wired.com