Personal identification information (PII) such as ID photos, loan agreements and other files exposing a wide variety of sensitive data such as full names, email addresses, national IDs, phone numbers, bank accounts containing more than 6.5 million files, totalling over 1TB of data, are being leaked from (now) instant loan app CashMama and three other apps associated with it, says a report.
According to SafetyDetetectives, the unidentified app’s data was stored under an app name, though it could not specify exactly which app this name referenced. “A small portion of files have an unknown origin — this data could’ve been collected for one of the loan apps mentioned, or, it could’ve been collected for a completely different instant loans app,” it says.
