LexisNexis offers software to perform credit checks and sanctions screening so access to their source code is arguably more valuable than any personal data - it could be used to sidestep the regulatory steps in the financial system and facilitate fraud, money laundering etc.
It’s already been used to direct funds in Asia from an actual financial institution to thieves. People still get phished on the regular. This is next level.
Were SSNs in a GH repo?
Credentials for GH access grabted access to the database with SSNs in it?
Those both seem, in their own right, quite bad.
“An unauthorized third party acquired certain LNRS data from a third-party platform used for software development. The issue did not affect LNRS’s own networks or systems,” the company said
prepend•8mo ago
[0] https://en.wikipedia.org/wiki/LexisNexis_Risk_Solutions