Data storage device leaks ATM blueprints

Some so-called network-attached storage drives, used for backing up files on a network, are automatically configured to allow anyone online access.

The “easy share” feature is supposed to make collaboration with other users more convenient. “Although it appears to be a little too convenient: miscreants aware of the ‘share everything’ design flaw are scanning the public internet for vulnerable models, and grabbing sensitive stuff,’” the Register reports.

The product publishes to a public IP address and provides a search function through which anyone connecting to the device using a web browser is able to search the contents of the device.

In the case of the cash machine blueprint breach, a contractor using a company laptop backed up work to a NAS box, which exposed its contents to the Internet – “all thanks to its factory settings,” according to the Register.

ThreatWatch is a regularly updated catalog of data breaches successfully striking every sector of the globe, as reported by journalists, researchers and the victims themselves.