German cloud service provider exposes entire Georgian country population - millions of personal data files leaked

• Security researchers found an Elasticsearch index with millions of entries
• The database contained personal information on millions of Georgians
• It was traced back to an unnamed German cloud provider

A German cloud service provider has unintentionally exposed sensitive data on probably the entire population of Georgia, security researchers are saying.

Cybersecurity expert Bob Dyachenko, of SecurityDiscovery.com said they recently discovered an non-password-protected Elasticsearch index containing a “wide range of sensitive personal details” belonging to Georgians. The index hosted two indices, one with almost five million personal data records, and another with more than seven million.

Given that the entire population of Georgia counts less than four million people, it’s safe to assume that even with numerous duplicate entries, all of its citizens could be at risk of identity theft, phishing, and more.

Shutting down the leak

The archives contained people’s ID numbers, full names ...