According to SC Media, citing a Cybernews investigation, an unsecured Apache Cassandra database belonging to Caja Los Andes exposed a massive volume of personal data [1]. The exposed records included names, dates of birth, addresses, phone numbers, and credit amounts and usage details [1]. Reports indicate the organization has secured the exposed database, though public access to the records could create identity theft and fraud risks [1].
Misconfigured Cassandra Database at Chile's Caja Los Andes Exposes Personal Data
1 min read
- Disclosed
- Aug 19, 2024
- Published
- Nov 8, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Finance
What to do nowOur advice
Reports indicate the organization has addressed the exposed database, though public access to the data could create identity theft and fraud risks [1].
Timeline
- Incident publicly disclosed[1]
Technical details
Source-Supported Details
Reports state that the organization has addressed the exposed database, but public access to the data could lead to identity theft and fraud risks [1].
Source excerpt: "Ten million Chileans, or more than half of the country's population, had their sensitive data stored by Caja Los Andes, the country's leading social security and pension fund, exposed as a result of an unsecured Apache Cassandra database, according to Cybernews ." [1].
References
Media1
- [1]
“Ten million Chileans, or more than half of the country's population, had their sensitive data stored by Caja Los Andes, the country's leading social security and pension fund, exposed as a result of an unsecured Apache Cassandra database, according to Cybernews .”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.