The World Baseball Softball Confederation (WBSC) exposed approximately 50,000 files, some of which were extremely sensitive, by leaving a data repository online.
The inquiry revealed that the compromised information belonged to the WBSC, which oversees baseball, softball, and other sports internationally.
Concerningly, copies of 4,600 different national passports were among the items in the incorrectly configured AWS bucket, which the WBSC shut down after being alerted by the team.
Cybercriminals may use passports to mimic victims and steal their identities since they contain a lot of personal information, such as complete names, dates of birth, and passport numbers.
"id": "WBS01621023",
"linkid": "wbsc",
"type": "Data Leak",
"date": "09/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"