Security firm Eioneus Systems claims to have found a serious security flaw in Universal Account Number(UAN) website (India) The bug gave access to information such as Provident fund balance, individuals KYC details, phone numbers, bank details, bank and bank details of every provident fund user in the country. The tech firm has shared few screenshots to support their claims of accessing the massive database. The issue was reported immediately to CERT-IN (Computer emergency response team)”]
Source: https://securityaffairs.co/wordpress/54173/hacking/employees-provident-fund-flaws.html