Small business loans app blamed as 500,000 financial records leak out of ... you guessed it, an open S3 bucket

Small business loans app blamed as 500,000 financial records leak out of ... you guessed it, an open S3 bucket

Bank info, driver's license copies and more found, report researchers


A now-defunct mobile app for loaning money to small business owners has been pinned down as the source of an exposed archive containing roughly 500,000 personal and business financial records.


The research team at vpnMentor said it traced an exposed database of financial records back to a former Android/iOS app called MCA Wizard, developed jointly by Advantage Capital Funding and Argus Capital Funding back in 2018.


The app, which has been pulled from both the Google and Apple stores, was apparently designed to allow businesses to apply for and manage merchant cash advance (MCA) short-term loans.


According to the vpnMentor crew, the app stored documents like bank statements, photocopies of driver's licenses, credit checks, and even tax and social ..

Support the originator by clicking the read the rest link below.