AavGo

Summary

An Elasticsearch database belonging to hotel management software provider, AavGo, has publicly exposed approximately eight million records. Researchers assess that the security lapse was due to a cloud configuration error and lack of an authentication mechanism. Exposed data includes booking details, guests’ personal information, login and payment type, email and physical addresses, dates of birth, and admin login details. Several large hotel chains have been impacted. For more information regarding this breach and a complete listing of impacted companies, read the Wizcase blog.