Nearly 800,000 applications for birth certificate copies exposed online for anyone to access

At this point, it's getting harder to determine which pieces of your personal data haven't been exposed online.

According Fidus Information Security, the company that discovered the data, nearly 800,000 applications for birth certificate copies are currently sitting completely unsecured online.

And the number keeps growing.

First reported by TechCrunch, the exposed records were compiled by a company that allows people in the U.S. to request copies of their birth certificates. Sitting on the company's Amazon Web Services bucket is private information including names, birthdays, past and present addresses, emails, phone numbers, family members' names, and the stated reason people are trying to get the copy.

Notably, children's data is also included in the exposed bucket.

Importantly, the information isn't password protected, which means all a bad actor needs to do to access the info is guess a URL. For this reason, we are not naming the company.

Both Fidus Information Security and TechCrunch also declined to publish the name of the company in question, as it had not responded to their requests for comments or, more importantly, fixed the problem.

"We've reached out to both the company and Amazon multiple times," explained Fidus' director, Andrew Mabbit, over email, "but Amazon are only able to report it to the bucket owner and not take corrective action themselves."

We also reached out to the company in question, both to alert it of the exposed data and ask for comment, but received no immediate response.

In other words, the data remains out there — ripe for the taking.