Tech - News
Reliance Jio Coronavirus Symptom Checker App Reveals Consumer Data
Reliance Jio has launched its own COVID-19 self-testing symptom checker. However, there was a security lapse from the end of Jio, which exposed one of its key symptom checker databases to the internet without a password, TechCrunch stated.
Technical bugs in Reliance Jio's COVID-19 symptom checker software revealed its core database containing consumer sensitive information, TechCrunch said. The Indian Telecom giant introduced a self-checking software last month to help users test for coronavirus infection on their phones.
Along with the findings of the COVID-19 checks, the exposed database includes millions of person logs and documents from April 17, 2020 to date. Other details included user age, gender, location, symptoms, health data, application version details, operating system, and other profile information.
The problem came to light after security researcher Anurag Sen discovered and reported the matter. TechCrunch reported that the database has been taken offline and is now protected after notification to the Reliance authorities.
TechCrunch reported that it was able to identify specific coordinates for users using the latitude and longitude records found in the database. It was discovered that most of the user's geo-locations were clustered around Indian cities like Mumbai and Pune, including U.K. users. And the North Americas.
"We took immediate action. The logging system was designed to track the output of our website for the limited purpose of self-checking people to see if they have any symptoms of COVID-19, "Jio spokesperson Tushar Pania said in a press release.
Coronavirus-related Data Breaches
In a similar data breach incident, hackers breached a database containing information of all COVID-19 patients held by the Aythala District Administrator's office computers in Kerala, Indian state. The data included information on people coming from abroad to the district and those held in self-quarantine, their recent travel background, their home addresses and contact details,etc.
The list of confirmed and quarantine patients in the district was handed over to the police and district health authorities to support them in the ongoing monitoring of their patients. Nevertheless, the same list has started to appear locally on numerous social media sites and forums.