A misconfiguration in a web server at the Municipal Bond Insurance Association has exposed countless customer account numbers, balances and other sensitive data.
According to security blogger Brian Krebs, much of the information had been indexed by search engines, including a page listing administrative credentials that could be accessed via a simple web search.
The largest provider of municipal bond insurance and investment management products in the USA, the company quickly disabled the vulnerable site once notified about the breach, as this contained customer data from Cutwater Asset Management, a fixed-income unit of MBIA that is slated to be acquired by BNY Mellon Corp.
VIEW FULL STORY
