Security researcher Jeremiah Fowler together with the Website Planet research team discovered a non-password protected database that contained 822,789 records. The dataset had detailed information on trucking, transport companies, and individual drivers. The data appeared to be connected to credit accounts, loans, repayment, and debt collections. This included banking information and tax ID numbers. Many of the Tax IDs were consistent with what appeared to be SSN (Social Security Numbers) and stored in plain text.
Upon further research there were multiple references including internal emails and usernames of a Florida based company called TransCredit. The team immediately sent a responsible disclosure notice to TransCredit and public access was restricted shortly after. The records appeared to contain the data of trucking and transportation companies based in the United States and Canada.
According to their website: TransCredit utilizes robust data from a large network of aging providers to create our reports. Our DISC and Premier Credit Reports are the most comprehensive industry-specific credit reports available, displaying a unique credit score and payment trends. We provide dependable credit reports that you can access quickly to make informed decisions.
