Merucab Company - Cab Service Company

MeruCab Company

A well-known cab service company in India which provides online and mobile booking services. However, recent customer data exposed incident has trigger MeruCab to take security seriously.

In May 2015, MeruCab has been facing a critical issue regarding exposure of customer data. Security experts found out that the problem lies with improper storage of customer’s valuable information. Customers will key in their information which will then produce a log file and it will be sent to the public web server. The directory to the data is publicly accessible which tell us how vulnerable their security structures are.

As there are many possibilities that could lead to such issue, the most controversial argument is due to competitive environment in India. They wanted to release the application faster than other companies which turn out lacking of security planning. It failed to implement encryption technology to protect the logs and no proper controlling on the servers.

Hackers can use a specific URL to access the logs without using any proper hacking tools. Some argue that due to misconfiguration of the web server which make it easy for hackers to access. Having exposure of customer data has brought disadvantages to MeruCab, customers will feel unsecure and lose confidence to the company. As customers change their decision to other reliable company, its revenue will start to decline and therefore losing the current and potential partner organization as they lose confidence and think that the company is not worth investing anymore.

The event has taught us to put security as a priority issue where techniques is implemented and tight security is deployed. Solutions can be made by making sure they have thoroughly analyzed security matters before releasing to the public. Also, implement encryption to the logs so that data are encrypted which prevent hackers from getting the information.

...