RIO DE JANEIRO, BRAZIL - A failure at fintech Nubank has exposed personal customer data on the internet. The Brazilian fintech enabled data such as account number, full name and the Natural Persons Register (CPF) to be found on Google, Bing, and Yahoo searches, among others. The bug was reported by the cyber security researcher Heitor Gonvêa and corrected by Nubank.
According to a detailed report published by the researcher, the links indexed by Google were part of the "charge" function - where one can create a QR Code containing the amount and bank details to complete the requested payment. This . . .