


These lists were discovered to contain Key Ring users’ information, including email addresses, device and IP data, home addresses and passwords, although the latter were encrypted. As long as someone had access to the URL, they could easily view tons of cards and personal information. When vpnMentor discovered the servers, they found that they were accessible using nothing more than a web browser. This means all those ID and membership cards users stored were floating around on the web and were up for grabs. This practice isn’t officially endorsed by the app’s developers, but it’s common enough to make a recent security incident more than a little alarming.Īccording to reports from researchers at vpnMentor, a misconfigured Amazon Web Services server owned by Key Ring left more than 44 million user records exposed with no form of protection. Many users also upload more personal cards, like state IDs, driver’s licenses, credit cards, medical IDs and more for convenience. Key Ring is a popular app for iOS and Android, designed to store digital copies of loyalty cards for dining, travel and shopping. Key Ring leaves the door open for hackers This recently happened to one of the most popular digital wallet apps on the market and millions of users might now be in jeopardy. And when the app in question is designed to store private information like ID and membership cards, it’s far more dangerous. When an app suffers a data leak, it’s a big deal. Tap or click to see how a home security camera app leaked millions of people’s personal data. Some programs offer a plethora of useful features but they’re weak when it comes to cybersecurity. Unfortunately, not all apps are created equal.

That’s why we always recommend users back up their digital data and use secure apps to store important logins and membership info. Digital safety is what we’re all about here at.
