Blog

Overview

* Available on Android and iOS, the Adorcam app left millions of records unprotected and exposed U.S. security camera users.

* After noticing the exposure, a U.S. researcher reported the leak to the company, which managed to encrypt the data again.

* Recently, data from 220 million Brazilians was also exposed online and even sold for cryptocurrencies on the deep web.

-

A flaw in a security camera monitoring app left more than 120 million users with data exposed on the internet in the United States.

According to information from Rainbowtabl.es, the Adorcam app had security vulnerabilities throughout the month of January, on both iOS devices and Android phones.

According to the site, the information was found after researcher Justin Paine identified the exposure of an Elastic Search database.

Providing P2P connectivity, the leaked data included email addresses, user passwords, Wi-Fi network names, and images captured by security cameras—totaling data from around 124 million users in a roughly 50 GB file.

With more than 10,000 downloads, Adorcam is a popular app used by people who have security cameras from brands such as Zeeporte and Umino.

After the exposure, the researcher contacted the development team, which managed to protect the application’s database again.

The Adorcam case is just one among many where user data has been improperly exposed online.

Want to know how the software development process works? Learn more.

Recently, here in Brazil, data from 220 million people was also exposed, putting the information security sector on alert.

Rumors indicate that data such as CPF numbers, credit scores, salaries, phone numbers, among others, may have originated from the credit bureau Serasa Experian.

Another hypothesis raised by digital security experts is that this data could have been compiled on the deep web through a detailed process, cross-referencing information from different sources.

Although the company denies that the leaks are related to Serasa’s database, the exposure identified by PSafe puts the integrity and privacy of the entire Brazilian population at risk.

With data lacking proper protection, it becomes easy for hackers to collect this information and carry out phishing and extortion attempts against users.

In fact, after the largest data leak in Brazil, data belonging to several authorities in the country was sold in exchange for cryptocurrencies such as Bitcoin, since they are difficult to trace and easy to transfer between users.

Brazil’s General Data Protection Law (LGPD) brings tough sanctions for insecure systems

With Brazil’s General Data Protection Law (LGPD) now in effect, users can feel more secure about the protection of their personal data on the web.

The law states that any company that stores data—even simple data like email addresses—must ensure its integrity.

If there is a leak, Brazilian legislation sets a fine of up to 2% of revenue, capped at R$ 50 million.

Because of this, investment in cybersecurity is expected to increase in the coming months, since encrypting this data is one of the best ways to protect users of a given app.

That’s why having a secure app is essential for service reliability

One of the main ways to protect your business and your customers’ data is to focus on developing a secure system or app.

That’s why it’s important to rely on specialized companies, since they will always use the best security techniques to provide reliability and ongoing support in case issues are found.

Here at X-Apps, we have already developed systems for banks, fintechs, retail websites, and many other companies that focus on maintaining the integrity of their users’ data.

In addition, we have never suffered cyberattacks, and no system we developed showed flaws that compromised system reliability.

What do you think about developing a secure app with us?

Talk to an X-Apps specialist now to clear up your questions or request a quote.

Learn more:

- IT investments are expected to increase 6.2% in 2021, says Gartner

- Brazil’s Startups Legal Framework is approved by the Chamber and could heat up the IT market

- Bradesco Exclusive Browser: how the partnership with X-Apps generated more than 1 MILLION and 200 thousand visits