The Cybernews research team discovered a configuration mistake in the OCR Labs system that exposed sensitive data.
The data leak had an effect on Defence Bank, Bloom Money, Admiral Money, MA Money, and Reed.
Using exposed data, threat actors might be able to infiltrate the backend infrastructure of banks and, as a result, the infrastructure of their clients.
Given that financial services are the main target of cybercriminals, businesses and their customers are seriously at risk.
Cybernews contacted OCR Labs, who then fixed the issue.
Source: https://securityaffairs.com/144514/data-breach/ocr-labs-data-leak.html
"id": "BLO41329523",
"linkid": "bloom-money",
"type": "Data Leak",
"date": "04/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"