Sunday, September 24, 2023
  • Hype
  • Murai
  • Lipstiq
  • Diva
  • Varnam
  • Moviedash
  • Autofreaks
Lowyat.NET
  • News
    • Lifestyle
    • Computing
    • Hardware
    • Internet
    • Rumours & Leaks
    • Software
  • Forums
    • Kopitiam
    • Tradezone
    • Property Talk
    • Finance & Business
    • Fast and Furious
  • Gaming
    • PC Gaming
    • Console
    • Esports
  • Mobile
    • Apps
    • OS
    • Tablets
    • Phones
    • Telco
      • Celcom
      • DiGi
      • Maxis
      • Tune Talk
      • U Mobile
      • Buzzme
  • Pricelists
    • Compu-zoneUpdated
    • ViewnetUpdated
    • Sri ComputersUpdated
    • StartecUpdated
  • More
    • Automotive Tech
    • Drone
    • Enterprise
    • Entertainment
    • Fashion
    • E-Hailing
    • Wearables
No Result
View All Result
Lowyat.NET
  • News
    • Lifestyle
    • Computing
    • Hardware
    • Internet
    • Rumours & Leaks
    • Software
  • Forums
    • Kopitiam
    • Tradezone
    • Property Talk
    • Finance & Business
    • Fast and Furious
  • Gaming
    • PC Gaming
    • Console
    • Esports
  • Mobile
    • Apps
    • OS
    • Tablets
    • Phones
    • Telco
      • Celcom
      • DiGi
      • Maxis
      • Tune Talk
      • U Mobile
      • Buzzme
  • Pricelists
    • Compu-zoneUpdated
    • ViewnetUpdated
    • Sri ComputersUpdated
    • StartecUpdated
  • More
    • Automotive Tech
    • Drone
    • Enterprise
    • Entertainment
    • Fashion
    • E-Hailing
    • Wearables
No Result
View All Result
Lowyat.NET
No Result
View All Result
Home Data Breaches

MITI Site Left Employee Data Under PIKAS Exposed

Details include full names as well as IC numbers and phone numbers.

by Ian Chee
June 1, 2022
MITI PIKAS leak

Source: Suresh Ramasamy / LinkedIn.

250
SHARES
Share on FacebookShare on Twitter

Back in July 2021, the Ministry of International Trade and Industry (MITI) required companies to register their staff for the Public-Private Covid-19 Industrial Immunisation Programme (PIKAS). Personal data of the employees involved in the program may have been exposed, according to a cybersecurity expert.

Suresh Ramasamy, in a LinkedIn post, showed screenshots of a file directory under the PIKAS website. Among the files found in there were spreadsheets that are the ones that companies were supposed to submit to MITI via the PIKAS system. The spreadsheets in question had the names, IC numbers, employee ID, age, gender and contact numbers of the companies’ staff. From one of the screenshots posted, the spreadsheets had file names that look like they reference the companies that submitted them.

MITI PIKAS leak spreadsheet
Source: Suresh Ramasamy / LinkedIn.

In the post, Suresh claims that the directory in question may have been intentionally left it open. Supporting his claim, he points to another directory called “logs” with files starting with the name Laravel. This is referencing Laravel application logs that are left open to provide vendor access for troubleshooting purposes. As for why the directory was left open, Suresh’s hypothesises that it either involves remote work, easier file transfer to a different server, or straight up malicious intent involving the sale of the data in question.

CodeBlue reports that the MITI PIKAS site in question was taken down shortly after Suresh published the LinkedIn article. There’s also no way to tell the duration of which the directory was left open beyond MITI’s own server logs.

This comes hot on the heels of two other recent privacy concerns including the issue surrounding the MySejahtera app and ownership of the app’s data. Another is the data leak that purportedly came from the National Registration Department (JPN) although Home Minister Hamzah Zainudin has since denied this.

(Source: LinkedIn via CodeBlue)

What’s your Reaction?
+1
0
+1
0
+1
0
+1
0
+1
0
+1
0
+1
0

Follow us on Instagram, Facebook, Twitter or Telegram for more updates and breaking news. 

Filed Under DataexposedLeakmitiPIKAS
Updated 5:37 pm, Thu, 2 June 22
Back to top
Share100Tweet63SendShare
No Result
View All Result

TRENDING THIS WEEK

  1. 1
    Telco

    Maxis, U Mobile, CelcomDigi Announce Their iPhone 15 Pre-Order Plans

  2. 2
    Computing

    Major Windows 11 Update Coming 26 September; Here’s What’s New

  3. 3
    Branded

    The Samsung Galaxy Z Flip5: Unfolding A World Where Durability Meets Design Excellence

  4. 4
    Telco

    Yes 5G To Offer iPhone 15 Series Starting From RM21/Month

  5. 5
    Branded

    Rewriting Your Sleep Cycle with Samsung Galaxy Watch6 Series

NETWORK

  • Hype
  • Murai
  • Lipstiq
  • Diva
  • Varnam
  • Moviedash
  • Autofreaks

ABOUT

  • Advertise
  • Careers
  • Privacy Statement
  • Contact Us
  • Editorial Policy
  • Terms & Conditions

©2023 VIJANDREN RAMADASS. ALL RIGHTS RESERVED.

No Result
View All Result
  • News
    • Lifestyle
    • Computing
    • Hardware
    • Internet
    • Rumours & Leaks
    • Software
  • Forums
    • Kopitiam
    • Tradezone
    • Property Talk
    • Finance & Business
    • Fast and Furious
  • Gaming
    • PC Gaming
    • Console
    • Esports
  • Mobile
    • Apps
    • OS
    • Tablets
    • Phones
    • Telco
      • Celcom
      • DiGi
      • Maxis
      • Tune Talk
      • U Mobile
      • Buzzme
  • Pricelists
    • Compu-zone
    • Viewnet
    • Sri Computers
    • Startec
  • More
    • Automotive Tech
    • Drone
    • Enterprise
    • Entertainment
    • Fashion
    • E-Hailing
    • Wearables

©2023 LOWYAT, LLC. ALL RIGHTS RESERVED.