New Delhi — Aye Finance, the Gurugram-based microfinance Non-Banking Financial Company (NBFC) that recently secured Securities and Exchange Board of India (SEBI) approval for its initial public offering (IPO), has responded to recent findings that data relating to National Automated Clearing House (NACH) mandates associated with its customers was exposed. The company says the exposure was not due to any breach of its own systems, but rather stemmed from a misconfiguration by a third-party vendor.
This week, cybersecurity researcher UpGuard flagged that more than 273,000 PDF documents processed via India’s NACH platform were stored in a cloud storage “bucket” that was publicly accessible. Th
...
