The Ecuadorian government has begun to investigate the data breach of approximately 20 million people. Nearly the entire nation could have been affected, given that Ecuador’s population is 16.5 million. Notably, data on President Moreno and Julian Assange was also leaked. As part of a routine project, internet security firm vpnMentor uncovered the breach and traced it back to an Ecuadorian data analytics and management company, Novaestrat, based in Miami, Florida. The data exposed personal information such as names, birth dates, social security numbers, driving records, and bank account information.
Although the breach was reportedly closed on September 11th, 2019, the report from vpnMentor affirms that “once data has been exposed to the world, it can’t be undone.” Information may have fallen into the wrong hands, leading to lasting ramifications for the many involved. Both individuals and companies are at risk for identity theft, financial fraud, business espionage, and other security threats. Ecuadorian authorities have taken steps to address the issue at hand, raiding the home of Novaestrat’s legal representative, William Roberto G., and detaining him. In addition, the government has taken steps to accelerate the process of passing a new data privacy law. While the scope and reach of this particular breach are alarming, perhaps the most alarming aspect is that data hacking is not an uncommon phenomenon. It is important for governments to take steps to pass legislation protecting the privacy of their citizens and businesses.
