DNA Site Leaves Records Open to Law EnforcementDNA Site Leaves Records Open to Law Enforcement
A pair of breaches reset user accounts to allow access for two days.
July 24, 2020
Gedmatch, the DNA-matching website made famous when it was used to catch the Golden Gate Killer, has warned users that a pair of breaches might have exposed thousands of users' data to law enforcement agencies.
According to the company, a pair of breaches — on July 19 and 20 — reset user permissions to allow law enforcement agencies to scan all data. Normally, users must opt-in to law enforcement searches.
Gedmatch has not reported whether any law enforcement searches were actually conducted during the hours when sitewide access was available, though it told one news outlet that no law enforcement requests for access were received during that time. It has said that the vulnerabilities have been remediated.
For more, read here.
Register now for this year's fully virtual Black Hat USA, scheduled to take place August 1–6, and get more information about the event on the Black Hat website. Click for details on conference information and to register.
About the Author(s)
You May Also Like
Reducing Cyber Risk in Enterprise Email Systems: It's Not Just Spam and PhishingNov 01, 2023
SecOps & DevSecOps in the CloudNov 06, 2023
What's In Your Cloud?Nov 30, 2023
Everything You Need to Know About DNS AttacksNov 30, 2023