FedEx Corp said on Thursday that it has secured many of customer identification records that were involuntarily exposed earlier this month by an unsecured server.
According to the Global package delivery company, so far no evidence that private data was “misappropriated” was discovered.
A report from security research firm Kromtech, revealed that the server stored more than 119,000 scanned documents from U.S. and international citizens, such as passports, driving licenses and security identification.
Kromtech said its researchers discovered the unsecured server on Feb. 5 and it was shut down to public access on Wednesday.
The data was stored on a Amazon S3 storage server and collected by a company FedEx acquired in 2014, Bongo International, which calculated international shipping prices and provided other services. FedEx afterward discontinued the service.
FedEx spokesman Jim McCluskey said in a statement, “After a preliminary investigation, we can confirm that some archived Bongo International account information located on a server hosted by a third-party, public cloud provider is secure.”
“We have found no indication that any information has been misappropriated and will continue our investigation,” McCluskey added.
McCluskey declined to supply details on what portion of the records were secure, or whether FedEx had notified authorities. The incident affected a tiny portion of FedEx customers globally.
The exposure seems far less disruptive than a cyber attack last year on Fedex’s Dutch TNT Express unit, which slashed $300 million from its quarterly profit.
