TECH: Home data stores found leaking online


People who use home data storage devices known as Network Attached Storage (NAS) have been found to be at risk of losing their data to online attackers.

Correctly configured, these devices act as a common data store accessible by any other device connecting to that home network. However, many users have set them up incorrectly - and have accidentally made their personal data accessible not just to their home network but to the internet at large.

Visiting this data is as easy as visiting any other webpage – as Shodan search engine shows.

At risk are photographs, home videos and music collections as well as scans of documents such as passports, tax forms and other sources of personal data. In some cases, back-up files are being made available that, if downloaded and restored, could let attackers take over a victim's online life.

Security firms suggest that attackers have already found out about this easy-to-access source of saleable data and are starting to actively seek it out and share it.

To find out how many people are accidentally sharing their data online, the BBC turned to the Shodan search engine. While Google, Bing and others seek out data on the net, Shodan looks for devices.

In the past, security researchers have used Shodan to expose insecure and poorly protected computers controlling industrial plants, power plants, heating and ventilation systems and CCTV streams.