Saudi Government Portal: Pryx Exploits IDOR to Leak 40GB of Citizen Data On August 27, 2024, threat actor Pryx published approximately 40 gigabytes of data exfiltrated from saudi.gov.sa, the Saudi government's central services portal. The data included scanned national ID cards, driver's licenses, work CVs and resumes, and private email attachments.
Executive Summary
KEY FACTS
- WhatThreat actor Pryx exploited IDOR to leak 40GB from saudi.gov.sa.
- WhoSaudi citizens who uploaded documents to the government portal.
- Data ExposedNational ID scans, driver's licenses, CVs, and email attachments.
- OutcomeOccurred 18 days before PDPL enforcement; Pryx unmasked as Hellcat co-founder.
References
SOURCES
Resecurity, BleepingComputer, Dark Reading, Saudi PDPL