In 7 EU countries, Tala assessed the websites of the leading MSPs for the European top mobile providers, data exposure is a major unacknowledged concern. Analysis of Europe’s leading mobile providers’ websites by Tala Security shows that critical information has been at risk of over-sharing and attack — with few appropriate security measures in place to discourage it. Tala Security’s recent study reveals that data exposure is a real concern for Europe’s leading mobile companies and by extension for more than 253 million customers who register up and share personal information. The main issue is the insecure website supply chains.
“In many cases, data sharing or exposure takes place via trusted, legitimate applications on the allow list —often without the website owner’s knowledge,” said Deepika Gajaria, VP of Products at Tala Security.
Forms used to collect credentials, banking information, passport numbers, etc. are revealed to an average of 19 third parties at considerable risk through form data exposure. No responsive website protection was established on any of the sites. On a scale of 100 with a score of 50 at an average, the website average was only 4.5. 100 percent of the most widespread website attack that frequently led to a significant sensitive leakage in the data is cross-site scripting (XSS).
“European Telco’s routinely collect sensitive data like passport scans, banking details, address, and employment information. When website owners fail to effectively secure data as it is entered into their websites, they’re effectively leaving it hanging, an accident waiting to happen,” said Gajaria.
If you like the site, please consider joining the telegram channel or supporting us on Patreon using the button below.