Page 1 of 1

NZ IRD exposes ~500,000 users details to Facebook.

Posted: Sun Sep 08, 2024 11:43 pm
by idle
Forget data breaches, NZ Inland Revenue Department gave ~500,000 users details to Facebook
Seriously what muppet thought that was a good idea, didn't they think for a moment that it's dead easy to match the hashed data to a Facebook account, it would only take a second to match the unsalted hash's to the users account by iterating through the NZ users in their database.

https://www.rnz.co.nz/news/business/527 ... -campaigns

https://developers.facebook.com/docs/ma ... ences#hash

seriously gob smacked

Re: NZ IRD exposes ~500,000 users details to Facebook.

Posted: Mon Sep 09, 2024 1:22 pm
by tj1010
National Public Data background check service just lost full SSN data to a breach of about 82% of the total US population.. Plus data of other countries

Both of these were supposedly PCI compliant lol

Re: NZ IRD exposes ~500,000 users details to Facebook.

Posted: Mon Sep 09, 2024 9:44 pm
by idle
Yes but PCI stands for politically correct incompetence. Which is pretty much every milenial middle manager. :lol: