Home / Technology / Millions of Passports Leaked by Hotel Check-in App
Millions of Passports Leaked by Hotel Check-in App
16 May
Summary
- Hotel check-in system Tabiq exposed over one million customer passports.
- A security lapse allowed sensitive documents to be publicly accessible.
- The company is investigating the exposure and plans to notify affected individuals.
A Japanese tech startup's hotel check-in system, Tabiq, has suffered a significant security lapse, leaving over one million customer passports and driver's licenses exposed online. The data became publicly accessible through a misconfigured Amazon cloud storage bucket maintained by the startup, Reqrea. This sensitive information, including selfie verification photos, was available to anyone knowing the storage bucket's name.
Security researcher Anurag Sen discovered the vulnerability and alerted TechCrunch, which then prompted Reqrea and Japan's cybersecurity team to secure the data. Reqrea's director stated the company is conducting a review to determine the full scope of the exposure, as the exact cause of the misconfiguration remains unknown. Affected individuals will be notified after the investigation is complete.
