The Register: Mexican tax refund site left 400GB of sensitive customer info wide open

The Register: Mexican tax refund site left 400GB of sensitive customer info wide open. “Mexican VAT refund site MoneyBack exposed sensitive customer information online as a result of a misconfigured database. A CouchDB database featuring half a million customers’ passport details, credit card numbers, travel tickets and more was left publicly accessible, security firm Kromtech reports. More than 400GB of sensitive information could be either downloaded or viewed because of a lack of access controls before the system was recently secured.”