The company's tracking numbers are sequential, so if someone had one tracking number, they could change a few digits and get someone else's tracking information. "The images may display, at most, name and address, and perhaps identify the vendor." Edit an URL, find a package? Only the individual customers can now see their delivery photos," she said. "We immediately shut down access to these files and within hours implemented a permanent solution. It delivers Amazon packages in New Brunswick and in other provinces, including Ontario and Prince Edward Island. Irving Ltd, before Postmedia acquired the company in 2022. The so-called "S3 bucket" database where BNI stores all of its tracking and delivery information was misconfigured to be public, which it should have been set to private, St-Pierre said.īNI was owned formerly owned by J.D. In a statement, Postmedia spokesperson Phyllise Gelfand said the company "was recently made aware" of the issue. The company delivers Amazon packages not just across New Brunswick, but in other provinces, including Ontario, Quebec, Nova Scotia and Prince Edward Island. Names are not included in the database, nor payment and credit card information, but some delivery photos show the shipping label, which includes names and addresses of the receiver.īNI, also known as Brunswick News Inc., was owned by J.D. "I just stumbled on it," said St-Pierre, who was curious about the tracking software when he got his own package delivered by BNI. Maxime St-Pierre, a freelance web developer, discovered that a database of BNI tracking and delivery notices - including proof-of-delivery photos, exact GPS co-ordinates and time of the delivery - were publicly accessible to anyone with a computer. People who received an Amazon package delivered by the New Brunswick-based company BNI in the last few months likely had photos of their front doors accessible online, in the latest example of a type of privacy breach that cybersecurity experts know all too well.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |