Thread: Major Data Breach

I’ve just come across a companies database on the open web under their company google search with hundreds of firearm owner details. Full Names, Addresses, FAL details and photos of licence, vehicle details, phone numbers.

Do I contact the police immediately or wait for the morning and contact the company? It’s not glaringly obvious what it is when it shows up in the search results but the only reason I found it was when googling someone, a random photo of a firearms licence popped up in the google image results. Thought it was strange, clicked on the google image and associated webpage and the database popped up.

Thoughts?

Fuck it, calling police.

Not unexpected!
Do both, Police and Company, please.

CEOs contact details and FAL info were on the database, tried to call him but didn’t pick up.
A couple of my friends and family are on the database with all of their correct details. Crazy

Following with interest.......

This needs to be sorted alright. The first contact in my opinion should be with the company and they should disclose the issue to the Police after confirming that there has been a breach. Assuming it is a New Zealand private company and the knowledge of ithe insecurity gets into the wider community it will also have the effect of diverting attention away from the Police not being able to keep firearms license holders data secure.

I feel you need to go public with it so its not covered over, yes the police need to know but good luck getting to talk to the right person

Colfo need this information , as does ACT party.

Originally Posted by bigbear

I feel you need to go public with it so its not covered over, yes the police need to know but good luck getting to talk to the right person

Not until its fixed or everyone will go for a look

Get info to .inister Nicole McKee pronto.

Nicole will actually do something about it. And now she has some clout

If you haven't already, go through the privacy process detailed here: https://www.privacy.org.nz/responsib...hes/notify-us/

I'd gather evidence via screenshots

Why does a company list firearms users? My first concern is that this might be a pest control company or similar, exactly the firearms we do not want the gangs to know the location of.

Originally Posted by Ben Waimata

Why does a company list firearms users? My first concern is that this might be a pest control company or similar, exactly the firearms we do not want the gangs to know the location of.

Or forestry access permit info