Akado posts personal data of customers into public access. And it seems that he does not worry about this

The Akado Internet provider posts the personal information of its customers-both individuals and legal entities in the public database of Whois . In general access, you can see their names, addresses and phones. This was written by the IT consultant of the Foundation for the fight against corruption Vladislav Zdolnikov.

As Zsalnikov noted, he first discovered the availability of personal data of Akado clients 11 years ago, but then he "chose to forget about it as soon as possible." Now, according to him, he "has become even stronger - from the fact that nothing has changed over 11 years." The specialist checked several dozen IP addresses from the Akado range-among them there were large banks and government agencies with real addresses of branches and contact phones of employees, as well as individuals.

Headmakers turned to Akado, sending the operator examples of data. Ten days later, the company said that it deleted data from open access, but according to the IT specialist, in fact, only the specific personal data that he sent the company as an example turned out to be inaccessible.

Medusa randomly checked several IP addresses from the range indicated in the post of Zdolnikov. In Whois-data, these addresses really indicated the names, addresses and phones of different people and organizations. So, the IP address 212.45.3.107 was related to the museums of the Moscow Kremlin. Alexander Dremailov is indicated as a contact person-a man with this name and surname is mentioned on the museum’s website as the head of the scientific and production department of information systems.

In response to a request for a commentary from the Mediazone, the head of the Akado press service Svetlana Belykh invited the journalist to check how things are with personal data in the bases of other providers and promised to send a response to the request later. Mediazona checked the records of Rostelecom and MGTS and did not find personal data in the public domain.

Medusa checked several IP addresses belonging to subscribers of Riga Internet providers (both private individuals and companies). In all cases, Whois contained only information about the provider and its representatives, and there were no information of subscribers.

Grigory Levchenko, Sultan Suleimanov