RATP, French transport giant, got its server unauthorisedly accessed. The company is a state-owned enterprise. It administers transport infrastructure and has 64,000 people employed.

The issue reportedly concerns an old HTTP server storing employee records. Anyone who surf the Internet can easily access the information intended to have limited availability on the employee benefits web portal.

RATP has also been compromised for enduring further social engineering and phishing attacks as the breach provided enough information for the violators leaving its valuable confidential data unprotected and open to public.

10,000 French citizens got their data exposed.

Why protection can't be pointwise? Find all the cases, insights and guidlines here to help your information security situation out of mess or simply plug up the overlooked loopholes.