Wired reported that sensitive documents about the UK’s Coronavirus-tracing app have been carelessly leaked via a publicly accessible Google Drive link. According to the report, the leaked roadmap of the NHS’s controversial Covid-19 tracing app reveals that it could soon show user’s health status’ and ask them to share their precise location data.
This latest security lapse will only serve to exacerbate the public’s already heightened privacy fears related to the Covid-19 contact tracing app. It’s ironic that among the content in plain view there were documents that referenced the privacy protections in the app itself.
Time and again, cloud misconfiguration issues expose sensitive data that is not protected or encrypted, enabling unauthorised access and a host of other headaches for the enterprise and its data subjects. Organisations that store data in the cloud have a duty of care to adopt proper security measures that can prevent these and other issues.
To ensure sensitive information is always safe, organisations should look for cloud security platforms that enforce real-time access control, detect and remediate misconfigurations, encrypt sensitive data at rest, manage the sharing of data with external parties, and prevent data leakage