Archive — US — techcrunch
UK Visa Portal exposed thousands of applicants’ passports and selfies — thencalled the lawyers on us
The UK Visa Portal exposed over 100,000 applicants' sensitive documents, including passports and selfies, due to a security lapse. The website is not affiliated with the UK government, leading to confusion for users. Despite securing the data after the incident was reported, the company failed to communicate effectively with affected parties or TechCrunch, raising regulatory concerns.
Key points
- UK Visa Portal publicly exposed over 100,000 sensitive documents due to misconfiguration of Amazon-hosted storage.
- The portal is not affiliated with the UK government, misleading users into paying fees.
- Data included passports and selfies, some revealing precise real-world locations.
- TechCrunch reached out to the company, but rather than addressing the issue, it referred legal representatives.
- The incident highlights broader security concerns in digital identity management, amidst rising global identity checks.
Why it matters
- This incident reflects a growing trend of data breaches linked to misconfigurations rather than cyberattacks, which is becoming common in current IT trends.
- As governments emphasize online identity verification, the stakes of maintaining privacy and security increase, raising alarm over similar future incidents.
The UK Visa Portal breach underscores the vulnerability of sensitive personal data on third-party platforms. Consumers are advised to avoid such services and apply directly through official government channels to prevent similar risks.