Rental giant Carla leaks user names, emails, and phone numbers ahead of
summer holiday break

Date:
Wed, 22 Jul 2026 13:05:00 +0000

Description:
Another day, another misconfigured database discovered online.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Cybernews found Carlas exposed AWS bucket with 48,000 PDFs containing customer rental data Files included names, emails, phone numbers, rental details, and travel patterns useful for phishing Carla secured the database after disclosure; no evidence of
malicious access, but risk remains Car rental comparison and booking platform Carla kept a database with sensitive customer information unlocked on the
open internet, freely available to anyone who knew where to look.

Cybersecurity researchers from Cybernews reported finding an exposed Amazon Web Services (AWS) bucket with approximately 48,000 PDF files. These files, which was later determined belonged to Carla, contained car rental details
and drivers personal information. Among other things, these files held vouchers and confirmation numbers, drivers names, email addresses, and phone numbers, rent periods, costs, pick-up and drop-off locations, as well as general vehicle information. Latest Videos From Watch full video here: Carla reacts Cybernews says the data could have been used in convincing phishing attacks. Not only would malicious actors get contact information, but they could also deduce individuals travel patterns, which could be used to establish trust with the victims - a crucial step in social engineering attacks.

After disclosing the findings with Carla, the company locked the database down. Currently, there is no evidence that it was accessed by malicious
actors in the past, but Cybernews says if our team uncovered it, so too may have threat actors that have automated tools searching specifically for unprotected corporate data. You may like European cloud giant Nextcloud exposes staff and clients in major data breach Top arcade game maker leaks nearly 19 million user records via WeChat mini app Experts warn "colossal" breach exposes 24 billion records including personal info

The service does not own a feel of its own. Instead, it works like a travel booking site, aggregating offers from hundreds of rental providers and offering users to compare prices and reserve cars online.

Misconfigured databases continue to be one of the key causes of major data spills. Businesses often misunderstand the shared responsibility model of cloud providers, leaving systems with default settings, or setting up weak
and easily guessed credentials. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news
and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

Cybernews recently also reported discovering an exposed ElasticSearch
cluster belonging to Nextcloud and containing 367,000 records of employee data, client company data, contracts, and various scripts. The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/rental-giant-carla-leaks-user-names-ema ils-and-phone-numbers-ahead-of-summer-holiday-break


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)