In a Microsoft Power Apps data breach incident earlier in 2021, 38 million records, including data from Covid-19 contact tracing platforms, vaccination sign-ups, job application portals, and employee databases, were allegedly compromised. Personal data, including the Social security numbers linked to JB Hunt Transport job applicants and employees may have been impacted.
The JB Hunt data includes a range of personal information, from people’s phone numbers and home addresses to Social security numbers.
Experts say the incident underscores how one bad app configuration on a popular platform can have serious privacy consequences.
All the allegedly exposed data was stored in the Microsoft’s Power Apps portal service, a platform that makes it easier to create web or mobile apps for external use.
Beginning in May, researchers began investigating a large number of Power Apps portals that publicly exposed data that should have been private, including one that impacted the JB Hunt Transport data. Among the types of information researchers found exposed were JB Hunt job applicant data that included Social security numbers.