The storage server was left open for about a week and exposed everything from sensitive FBI investigations to data related to patients with AIDS. The Oklahoma Securities Commission, part of the state s Department of Securities, ensures that individuals and firms in the financial trade markets follow the regulations that prevent fraud. The data was exposed through an unsecured rsync service, which is is a utility for synchronizing files across computer systems. The server was first registered on Shodan as publicly accessible on Nov. 30, and it laid open for a week before UpGuard analysts discovered it on Dec. 7.
Source: https://threatpost.com/oklahoma-gov-data-leak/140936/