Chum1ng0 - Security Research :verified:

#Chile-, Independent Researcher covering #hacktivism, #ransomware, #cybersecurity, #leaks, and data breaches in Latin America. #LATAM

You can subscribe to my newsletter dedicated to #cybersecurity, data breaches, misconfigurations, and #hacktivism in Latin America, created & edited by Chum1ng0 - Security Research :verified: (npub1xy5…zxlz)

Newsletter: https://newschu.substack.com

#misconfigurations #leak #cybersecurity #dataleak #databreach #privacy

Newsletter: http://newschu.substack.com
correo: [email protected]
X(ex-Twitter): https://twitter.com/chum1ng0
Can you buy me a coffee?: https://buymeacoffee.com/chum1ng0
Write-ups: https://write-ups.security-chu.com
##Blog: https://www.security-chu.com

Public Key

npub1xy5nvc0h3m63dx90je4sapurmetjd4vsvwc0j6c0lvtun0fc0teslvzxlz

NIP-05 Address

[email protected]

Profile Code

nprofile1qqsrz2fkv8mcaagknzhev6cws7pau4ex6kgx8v8edv8lk97fh5u84ucprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntg6nzfh

Publishing to

relay.momostr.pink

Author Public Key

npub1xy5nvc0h3m63dx90je4sapurmetjd4vsvwc0j6c0lvtun0fc0teslvzxlz

Show more details

Published at

2026-11-01T22:06:11Z

Kind type

0 Metadata

Event JSON

{ "id": "983c8da78710108d5de380138e12655bc335ef35c1b310a1cf385716b6bd92f9", "pubkey": "31293661f78ef51698af966b0e8783de5726d59063b0f96b0ffb17c9bd387af3", "created_at": 1793570771, "kind": 0, "tags": [ [ "emoji", "verified", "https://media.infosec.exchange/infosec.exchange/custom_emojis/images/000/162/424/original/be4326fe58d3b038.png" ], [ "t", "privacy" ], [ "t", "ransomware" ], [ "t", "leak" ], [ "t", "cybersecurity" ], [ "t", "latam" ], [ "t", "databreach" ], [ "t", "chile" ], [ "t", "leaks" ], [ "t", "hacktivism" ], [ "t", "dataleak" ], [ "t", "misconfigurations" ], [ "proxy", "https://infosec.exchange/users/chum1ng0", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://infosec.exchange/users/chum1ng0", "pink.momostr" ], [ "-" ] ], "content": "{\"name\":\"Chum1ng0 - Security Research :verified:\",\"about\":\"#Chile-, Independent Researcher covering #hacktivism, #ransomware, #cybersecurity, #leaks, and data breaches in Latin America. #LATAM\\n\\nYou can subscribe to my newsletter dedicated to #cybersecurity, data breaches, misconfigurations, and #hacktivism in Latin America, created \u0026 edited by nostr:npub1xy5nvc0h3m63dx90je4sapurmetjd4vsvwc0j6c0lvtun0fc0teslvzxlz\\n\\nNewsletter: https://newschu.substack.com\\n\\n#misconfigurations #leak #cybersecurity #dataleak #databreach #privacy\\n\\nNewsletter: http://newschu.substack.com\\ncorreo: [email protected]\\nX(ex-Twitter): https://twitter.com/chum1ng0\\nCan you buy me a coffee?: https://buymeacoffee.com/chum1ng0\\nWrite-ups: https://write-ups.security-chu.com\\n##Blog: https://www.security-chu.com\\n\",\"website\":\"https://infosec.exchange/@chum1ng0\",\"picture\":\"https://media.infosec.exchange/infosec.exchange/accounts/avatars/111/093/839/224/526/847/original/6ea2f42b00fb7ef4.jpg\",\"banner\":\"https://media.infosec.exchange/infosec.exchange/accounts/headers/111/093/839/224/526/847/original/acb58878760904e8.png\",\"nip05\":\"[email protected]\"}", "sig": "c92a51b696507d2f51f08473e3bb50341972f35fbb3949c31a3964d707ccd669c1cd5a59c2898b11937de723a77b799001d5256626fa2d71eade3adf1bf78aa2" }

Last Notes

2026-08-26 21:57:22 GMT

UPDATE:
The Gestiona Tu Visa LLC server that exposed 67 GB of immigrant data (DS-160 forms, contracts, and passports) is no longer exposed.
On August 18, 2026, I contacted GoDaddy, and they confirmed that they have deactivated the services.
#cybersecurity #databreach #dataprotection #privacy
https://www.security-chu.com/2025/11/Gestiona-Tu-Visa-expone-67GB-de-Inmigrantes.html

2025-12-12 02:34:09 GMT

Another day of closed data breach:
🇦🇪 Today we're talking about a commercial enterprise located in the United Arab Emirates. This information came from an IT service provider for Dubai Duty Free called touchworldtechnology.
Dubai Duty Free (DDF) is a retail operation at Dubai International Airport (DXB) and Al Maktoum International Airport (DWC), recognized worldwide as one of the largest and most successful duty-free shops in the world.
What data was exposed?
An open directory containing 90GB of information was exposed at the time, likely due to an error or misconfiguration.
While reviewing the folders, I found data that shouldn't have been publicly exposed. According to my information, this data had been exposed since the beginning of the year. I discovered it in early September, so imagine how long it had been exposed.
What files did that open directory contain?
At first, I saw Excel spreadsheets, invoices, test invoices—irrelevant things—but as I continued, I saw passports -id cards, which started to worry me. I also saw an env file containing the entire MySQL database configuration with its username and password, as well as the configuration of the bucket on digitaloceanspaces.com with its access key and secret.
So, someone backup the bucket and left it exposed?.
Notification:
I sent an email to DDF on September 3rd warning them about this situation. When I saw that no one responded, I sent an email to the AE Computer Emergency Response Team (AECERT) on September 5th. No one replied, but on September 10th, I received an email thanking me for my concern and saying they would forward the email to the appropriate department.
This was closed on September 13th, according to my follow-up.
#cybersecurity #AE #databreach #infosec
@npub17l5…4kr3
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/704/225/552/712/845/original/0748cb8cbc66cec2.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/704/225/636/243/149/original/433ba594c78104d6.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/704/238/392/853/506/original/dbdac5fc63b3235f.png

2025-12-05 21:12:42 GMT

Another day of closed data breach:
🇱🇰 This time it's a Sri Lankan insurance company, Continental Insurance Lanka Limited (https://cilanka.com), which has 58 branches across Sri Lanka. This extensive branch network is designed to provide close and convenient service to its customers nationwide.
Continental Insurance offers a wide range of personal and business insurance solutions.
Personal Insurance
Motor Vehicle Insurance
Health Insurance
Home Insurance
Travel Insurance
Business Insurance
Fire and Property Insurance
Engineering Insurance
Marine and Cargo Insurance
Liability Insurance
Employee-Related Insurance
This insurer exposed an open directory of 1.70GB in size with data in XLSX and JSON formats. This was exposed from the beginning of 2025—imagine how long it was exposed.
Among the exposed data were files called "claims" in JSON format. This reviewed file contained 3,657 medical insurance claim records.
What data do the files contain?
Employee/Patient, Internal CEA Reference, Reason for consultation,
Claim Type, Claimed Amount, Amount Not Paid, Amount Finally Paid, Consultation Date, Date the Insurance Company Was Notified, Payment Date, Hospital/Clinic, Check Number, Status.
But where were the insured parties in this file from?
From the Central Environmental Authority (CEA), https://www.cea.lk, the leading institution for environmental protection and management in the country.
Notification:
I notified the company on November 2nd via email to inform them of the situation and the information I was providing.
This matter was closed on November 5th without a response from the insurer.
I also didn't see any announcement on their website warning about this situation. Did the insurer notify the CEA (Central Environmental Authority of Sri Lanka) about the information I provided? We don't know, and we won't know, since no one responded to my emails.
#cybersecurity #Srilanka #insurance #databreach #government #infosec
@npub17l5…4kr3
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/668/997/693/308/267/original/cdf95f90d6d6e63a.png