loader gif

Unsecured Server Exposes Data for 85% of all Panama Citizens

Unsecured Server Exposes Data for 85% of all Panama Citizens (Breaches and Incidents)

An Elasticsearch server left connected to the internet without a password, or firewall protection, has leaked what appears to be personal records and patient information for roughly 85 percent of Panama's citizens. The leaky server was found online last week by Bob Diachenko, founder and security researcher with Security Discovery. The Elasticsearch server, a technology used to power fast search systems, contained 3,427,396 user records labeled as patient data. Judging that Panama's last census listed the country having a population of 4,034,119 citizens, it appears that personal records for 84.96% of all Panamanians was exposed online during this server mishap. Information stored in the leaky Elasticsearch server included names, home addresses, phone numbers, email addresses, national ID numbers, dates of birth, medical insurance numbers, and other, per Diachenko's analysis. Not all database entries contained the same type of information, and for some users, only part of this data was present in the database.

loader gif