UK Visa Portal spilled thousands of applicants’ passports and selfies online — and hasn’t fixed the leak

UK Visa Portal spilled thousands of applicants’ passports and selfies online — and hasn’t fixed the leak

A website called UK Visa Portal is publicly exposing the passports and selfie photos of applicants who signed up and paid the site to obtain a U.K immigration visa, TechCrunch has learned. An anonymous person notified TechCrunch about the security lapse, saying that the website is exposing at least 100,000 documents from people who uploaded…

Read More
Trump Mobile confirms it exposed customers’ personal data, including phone numbers and home addresses

Trump Mobile confirms it exposed customers’ personal data, including phone numbers and home addresses

Phone provider Trump Mobile has confirmed that it was exposing customers’ names, email addresses, mailing addresses, cell numbers, and order identifiers to the open internet. Chris Walker, a spokesperson for the Trump-branded phone maker, told TechCrunch that the company is investigating the exposure and has not found evidence that content or financial information spilled online….

Read More
A hotel check-in system left a million passports and driver’s licenses open for anyone to see

A hotel check-in system left a million passports and driver’s licenses open for anyone to see

A hotel check-in system left more than one million customer passports, driver’s licenses, and selfie verification photos to the open web after a security lapse. The data is now offline after TechCrunch alerted the company responsible. The hotel check-in system, called Tabiq, is maintained by the Japan-based tech startup Reqrea. According to its website, Tabiq…

Read More
Indian pharmacy chain giant exposed customer data and internal systems

Indian pharmacy chain giant exposed customer data and internal systems

A security lapse by one of India’s largest pharmacy chains allowed outsiders to gain full administrative control of its platform, exposing customer order data and sensitive drug-control functions, TechCrunch has exclusively learned. The issue affected DavaIndia Pharmacy, the pharmacy arm of Zota Healthcare, which operates a large network of retail outlets across India. Security researcher…

Read More
UStrive security lapse exposed personal data of its users, including children

UStrive security lapse exposed personal data of its users, including children

Online mentoring site UStrive has resolved a security lapse that exposed the personal information of its users, including children.  The exposed data included the full names, email addresses, phone numbers, and other non-public and user-provided information of UStrive users, which was accessible to any other logged-in user. The nonprofit, previously known as Strive for College,…

Read More
Thousands of Indian bank transfer records found spilling online after security lapse

Thousands of Indian bank transfer records found spilling online after security lapse

A data spill from an unsecured cloud server has exposed hundreds of thousands of sensitive bank transfer documents in India, revealing account numbers, transaction figures, and individuals’ contact details. Researchers at cybersecurity firm UpGuard discovered in late August a publicly accessible Amazon-hosted storage server containing 273,000 PDF documents relating to bank transfers of Indian customers. …

Read More
Thousands of Indian bank transfer records found spilling online after security lapse

Thousands of Indian bank transfer records found online

A data spill from an unsecured cloud server has exposed hundreds of thousands of sensitive bank transfer documents in India, revealing account numbers, transaction figures, and individuals’ contact details. Researchers at cybersecurity firm UpGuard discovered in late August a publicly accessible Amazon-hosted storage server containing 273,000 PDF documents relating to bank transfers of Indian customers. …

Read More