Renters' Data Exposed: Millions of Documents Online

Millions of leasing documents containing sensitive personal information of renters and landlords are exposed online due to vulnerabilities in real estate platforms. These documents, including lease agreements, identification, and payslips, are accessible via hyperlinks that can be scanned by web crawlers, with some dating back to 2017. A researcher found that by manipulating URLs, these documents could be accessed without authentication. Several platforms failed to respond to the researcher or made minimal security updates months after notification. Digital rights advocates have expressed strong criticism, highlighting a disturbing disregard for privacy laws and tenant security, especially given renters have little choice but to use these platforms. The Office of the Australian Information Commissioner is scrutinizing rent tech platforms due to growing concerns about power and information imbalances.