Jamaican government contracted Amber Group to develop a website and app used to publish COVID-19 data and let residents self-report symptoms. The JamCovid19 website and app also acted as a platform for travelers to upload negative test results prior to flying to Jamaica. The Jamaican government implemented this practice as part of their plan to combat the pandemic. Negative test results needed to be uploaded if travelers were coming from high-risk countries including the United States. The cloud storage server containing the JamCovid19 data was configured to allow public access to all files without a password. Researchers discovered the data had been exposed and contacted Amber Group. It is unknown how long the data was left unprotected and the researchers stated that many of the victims of the data breach were Americans. A member of Amber Group said the company created JamCOVID19 in three days and made it available to the government in large part for free.
Watch the Video
How does Binary Defense help protect your organization? With best in breed cybersecurity tactics, techniques, and services, we make sure that your environment is secure against the most advanced attacks.