Infoseccer: Private security biz let guard down, exposed 120K+ files

A security researcher found an unsecured server belonging to London-based Assist Security containing 124,035 files (46.48 GB) dating from an August 2023 backup and including highly sensitive personal data such as payroll records, national insurance numbers, ID documents, SIA cards, invoices and job applications. The researcher reported the issue on 23 October 2024 and Assist closed access six days later; there is no confirmed evidence of third-party malicious access and the ICO had not been notified at the time of reporting.