A hotel check-in system left a million passports and driver’s licenses open for anyone to see
AI-summarised brief · reviewed before publication
A hotel check-in system, Tabiq, maintained by Japan-based tech startup Reqrea, exposed over 1 million customer passports, driver's licenses, and selfie verification photos due to a security lapse. The data was stored in an Amazon cloud-hosted storage bucket that was set to be publicly accessible, allowing anyone to view the sensitive documents without a password. The issue was discovered by independent security researcher Anurag Sen, who alerted TechCrunch, prompting Reqrea to lock down the storage bucket. The company is conducting a thorough review to determine the full scope of exposure and plans to notify affected individuals.
💡 Why It Matters
- · Human error and misconfigurations are increasingly causing sizable security incidents, highlighting the need for companies to adhere to basic cybersecurity practices.
- · Exposed identity documents can put individuals at risk of identity fraud, underscoring the importance of secure data storage.