The Ministry of Digital Affairs has blocked access to a database that contained the personal information of up to 100,000 iRent users, after it was found that the data were unprotected, a senior ministry official said yesterday.
The statement came after US Web site TechCrunch on Tuesday reported that a database containing iRent data “was inadvertently accessible from the Internet.”
It was on a cloud server owned by Taiwanese automotive conglomerate Hotai Motor Co, it said.
Photo: Cheng Wei-chi, Taipei Times
“Because the database was not password-protected, anyone on the Internet could access the iRent customer data just by knowing its IP address,” the report said.
The databank contained the names, mobile phone numbers, e-mail addresses, home addresses, drivers’ license photographs and partly redacted payment card information of customers of iRent, a vehicle rental and sharing platform.
TechCrunch said security researcher Anurag Sen discovered the exposed database, adding that it had reviewed part of it and confirmed Sen’s findings.
It said it sent several e-mails to Hotai Motor about the exposed database, but did not receive a reply.
It said it also contacted the ministry, which took action to deal with the situation.
Deputy Minister of Digital Affairs Lee Huai-jen (李懷仁) confirmed that Minister of Digital Affairs Audrey Tang (唐鳳) was informed about the exposed databank by a foreign media organization during the Lunar New Year holiday.
Tang referred the case to the Taiwan Computer Emergency Response Team Coordination Center, a unit operated by the ministry-affiliated Taiwan Network Information Center, because it was an information security incident involving a private company, Lee said.
The center blocked outside access to the database, he added.
Hotai Motor’s mobile services unit said in a statement that it had addressed the exposed database “at the first moment” and reinforced its security.
A full-scale check of related systems and an investigation into the case shed light on the possible impact of the data spillage, the company said, without elaborating.
Security checks on the iRent system have been conducted regularly, it said, adding that iRent transactions are protected under the Secure Sockets Layer protocol.
Chinese-language media reported that iRent has nearly 1.4 million members and that the company hopes to raise that number to 1.8 million this year, while increasing the number of vehicles from 2,000 to 9,000.
The TechCrunch report cited Sen as saying that the exposed database contained millions of partial credit card numbers and at least 100,000 customer identification documents, as well as selfies, signatures and rental vehicle details.
It also said the database had been unprotected since May last year, adding that it was unclear whether any unauthorized party had accessed it.
Taiwan's Vice President Hsiao Bi-khim (蕭美琴) said Saturday that she would not be intimidated by the Chinese Communist Party (CCP), following reports that Chinese agents planned to ram her car during a visit to the Czech Republic last year. "I had a great visit to Prague & thank the Czech authorities for their hospitality & ensuring my safety," Hsiao said on social media platform X. "The CCP's unlawful activities will NOT intimidate me from voicing Taiwan's interests in the international community," she wrote. Hsiao visited the Czech Republic on March 18 last year as vice president-elect and met with Czech Senate leadership, including
There have been clear signs of Chinese Communist Party (CCP) attempts to interfere in the nationwide recall vote on July 26 in support of Chinese Nationalist Party (KMT) legislators facing recall, an unnamed government official said, warning about possible further actions. The CCP is actively involved in Taiwanese politics, and interference in the recall vote is to be expected, with multiple Chinese state media and TAO attempts to discredit the Democratic Progressive Party (DPP) and undermine public support of their recall movement, the official said. This interference includes a smear campaign initiated this month by a pro-Beijing Hong Kong news outlet against
A week-long exhibition on modern Tibetan history and the Dalai Lama’s global advocacy opened yesterday in Taipei, featuring quotes and artworks highlighting human rights and China’s ongoing repression of Tibetans, Hong Kongers and Uighurs. The exhibition, the first organized by the Human Rights Network for Tibet and Taiwan (HRNTT), is titled “From the Snowy Ridges to the Ocean of Wisdom.” “It would be impossible for Tibetans inside Tibet to hold an exhibition like this — we can do it. because we live in a free and democratic country,” HRNTT secretary-general Tashi Tsering said. Tashi Tsering, a Taiwan-based Tibetan who has never
A first shipment of five tons of Taiwan tilapia was sent from Tainan to Singapore on Wednesday, following an order valued at NT$600,000 (US$20,500) placed with a company in the city. The products, including frozen whole fish and pre- cooked fish belly, were dispatched from Jiangjun Fishing Harbor, where a new aquatic processing and logistics center is under construction. At the launch, Tainan Mayor Huang Wei-che (黃偉哲) called the move a “breakthrough,” marking Taiwan’s expansion into the Singaporean tilapia market. Taiwan’s tilapia exports have traditionally focused on the United States, Canada, and the Middle East, Huang said, adding that the new foothold in
RSS