Indian at-home salon platform Yes Madam exposed the sensitive data of its customers and gig workers due to a server-side misconfiguration.
The Noida-based Yes Madam operates in over 30 cities in the country, according to the firm’s website. The platform offers salon services at home, including therapies, massage, spa, and male grooming. Yes Madam’s mobile apps also attracted over a million downloads.
But the startup left a database containing full names, mobile numbers, mailing addresses and email addresses of hundreds of thousands of Yes Madam customers connected to the internet without a password since at least February 20. The database also included customers’ location data, including their latitude and longitude values, as well as payment …
