January 23, 2020

January 23, 2020

Subscribe to Latest Legal News and Analysis

January 22, 2020

Subscribe to Latest Legal News and Analysis

January 21, 2020

Subscribe to Latest Legal News and Analysis

Almost Entire Ecuadorian Population Affected by Massive Data Breach

The Ecuadorian Ministry of Telecommunications and Information Security has announced an investigation into data analytics company Novaestrat after news broke this week that the company left an Elasticsearch server open without any password protection, allowing open access to the data.

According to officials, Novaestrat was not supposed to have the data in the first place. The data included the personal information of nearly 21 million Ecuadorians, including 6.7 million children, 7.5 million financial and banking records, and 2.5 million records relating to car ownership.

According to reports, the Ecuadorian government believes the company obtained the information of almost all of the country’s citizens when it was awarded government contracts during the former political regime between 2015 and 2017.

The government reacted quickly, and following the announcement of the investigation, law enforcement raided Novaestrat’s office, seized computers and arrested Novaestrat’s general manager.

The data breach is the largest in Ecuador’s history.

Copyright © 2020 Robinson & Cole LLP. All rights reserved.


About this Author

Linn F. Freedman, Robinson Cole Law Firm, Cybersecurity and Litigation Law Attorney, Providence

Linn Freedman practices in data privacy and security law, cybersecurity, and complex litigation. She provides guidance on data privacy and cybersecurity compliance to a full range of public and private clients across all industries, such as construction, education, health care, insurance, manufacturing, real estate, utilities and critical infrastructure, marine, and charitable organizations. Linn is a member of the firm's Business Litigation Group and chairs its Data Privacy + Cybersecurity Team. She is also a member of the Financial Services Cyber-Compliance Team (CyFi ...