UK Visa Site Leaks Passports, Selfies of Applicants

A significant data breach has occurred, with the website UK Visa Portal exposing sensitive personal information of approximately 100,000 individuals. The exposed data includes passport scans and selfie photographs uploaded by applicants seeking U.K. visas.

This third-party service is not associated with the official U.K. government. Reports indicate that some applicants were misled into paying fees to this site rather than using the legitimate GOV.UK portal. The security vulnerability has persisted for an unknown duration, and the company has not provided a direct contact for management to address the ongoing issue.

Despite attempts to notify the company through its listed contacts, including its purported legal and public relations representatives, the security lapse remains unresolved as of the current date. The company's management has not responded to direct communication regarding the breach. TechCrunch has refrained from publishing specific details to mitigate further risks to affected individuals.

Authorities advise that using third-party services for electronic travel authorizations is unnecessary unless retaining an immigration attorney. Applicants should exclusively use the official U.K. government website for all immigration-related applications to ensure the security of their personal data.