Massive Data Leak Exposes 1M Passports Online
A hotel check-in system has exposed over 1 million passports and driver's licenses due to a security lapse. Discover how this incident highlights critical cybersecurity failures in the hospitality industry.
Major Security Breach in Hospitality
A recent security lapse in a hotel check-in system has left sensitive customer data, including over 1 million passports and driver's licenses, publicly accessible on the web. The system, known as Tabiq and maintained by the Japan-based startup Reqrea, was compromised due to a misconfigured Amazon cloud storage bucket that was set to public access.
Independent security researcher Anurag Sen discovered the breach and alerted TechCrunch, prompting Reqrea to secure the exposed data. This incident underscores a troubling trend where companies fail to protect customer information not through sophisticated attacks, but through basic cybersecurity oversights. Key points include:
- The exposed data included identity documents from guests worldwide.
- Reqrea is conducting a thorough review to assess the extent of the breach.
- The company plans to notify affected individuals once the investigation is complete.