The Cybernews research team came up with an open Kibana instance that contained private data on Belcan, its personnel, and internal systems.
ElasticSearch's analytics and data search engine uses Kibana as a visualization dashboard. These systems aid businesses in managing massive data volumes.
The leaked Belcan data includes Admin emails, Admin usernames, Admin roles (what organizations they’re assigned to), Internal network addresses, Internal infrastructure hostnames and IP addresses, Internal infrastructure vulnerabilities, and actions taken to remedy/not remedy them.
Belcan was warned of the vulnerabilities by Cybernews, and before this article was published, the business had put precautions in place to deal with the problem. Before this story was published, Belcan did not send any additional remarks on the results.
Source: https://securityaffairs.com/149779/data-breach/belcan-leaks-admin-password.html
"id": "BEL33411923",
"linkid": "belcan-engineering",
"type": "Data Leak",
"date": "08/2023",
"severity": "100",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"