Let's open the Mystery Data Security Blunder box, and see what's inside today... Ah! Hotel reservations and more

Internal hotel biz documents and guest bookings were exposed to everyone on the public internet from an unsecured database managed by tech provider AavGo, it is claimed. Silicon-Valley-based AavGo hosts management software in the cloud that can be used by clients to juggle reservations and operations, from sorting out cleaning …

[macjules]

Seems I've heard that one before.

.. told The Register the exposed database did not contain any personal info beyond names, phone numbers, and email addresses. The biz also insisted no payment card details were stored ..

©2018 British Airways. All Rights Reserved.

[Doctor Syntax]

AavGo

Is that pronounced "'ave a go?"

told The Register the exposed database did not contain any personal info beyond names, phone numbers, and email addresses.

What else would be needed for phising? "Could you please confirm your payment details"

The biz also insisted no payment card details were stored,

See above.

and nobody other than Brown is believed to have spotted the server

On what is this "belief" based, other than blind faith?

[simonlb]

and nobody other than Brown is believed to have spotted the server before it was secured

Citation needed on that one!

[sitta_europea]

"... Based on our detailed IP investigation, we have not seen any scripted events in our logs, allowing us to reaffirm that there was no data breach."

The way I read it, we only look at our logs after somebody tells us something nasty happened.

Well I look at mine every day, and nothing nasty has ever happened.

[Stuart Halliday]

And their Server *doesn't* come with security switched on by default? What is this, the Nineties?