Archive — US — techcrunch
A security lapse at prison pay phone service Pay Tel publicly exposed over 300Kcallers’ driver’s licenses
Pay Tel, a prison calling service, exposed over 300,000 drivers' licenses and sensitive user data on an unsecured Microsoft Azure cloud server. UpGuard discovered the lapse and alerted Pay Tel, which has not responded publicly. This incident marks the company’s second security failure in two years, raising concerns over data privacy and cybersecurity practices in tech companies.
Key points
- Pay Tel exposed over 300,000 driver's licenses and sensitive documents on an unsecured cloud server.
- The server was hosted on Microsoft Azure and was without password protection, leading to web access.
- UpGuard identified the security issue and notified Pay Tel on May 7; it was secured days later.
- Inmate communications, including texts and financial records, were also compromised.
- This is Pay Tel's second security incident in two years, indicating ongoing cybersecurity vulnerabilities.
Why it matters
- This incident highlights a recurring issue in tech companies misconfiguring systems or neglecting cybersecurity best practices.
- Similar data exposures have occurred in the tech industry, demonstrating the need for improved cybersecurity standards.
- In 2025, IT trends emphasize heightened focus on data protection and regulatory compliance in response to breaches.
The Pay Tel data exposure is a pressing reminder of cybersecurity weaknesses in tech companies and the importance of robust data protection measures to safeguard personal information.