Debt Collection: How an Unsecured ElasticSearch Instance Exposed Thousands of Borrowers

The debt collection system ENCollect had data storage of 5.8 GB, containing approximately 1.68 million records, secured by UpGuard’s research team. The data consisted of personal and loan details from various Indian and African financial firms. The exposed data entailed significant personal data, including 114,747 addresses, 105,974 phone numbers, and 48,043 email addresses. The Indian Computer Emergency Response Team played a crucial role in handling the data exposure.