One million passports leaked online
1–10 of 264 posts
Re: One million passports leaked online
#2I am sure even my passport would be part of the breach, are the passport holders beign notified of the breach?
Re: One million passports leaked online
#3Oh god that’s pretty bad
> The documents were hosted by systems used by cannabis clubs and a company called Nefos, which operates PuffPal, a platform that manages membership and age verification for cannabis retailers and clubs across Europe. The infrastructure storing these identity documents—full passport scans, driver’s licenses with photos, names, and identifying numbers—was left completely unprotected on publicly accessible web servers.
I cannot imagine the level of fines under GDPR for leaking that much PII
Re: One million passports leaked online
#4[stub for offtopicness]
Could we update the link to the original article? https://cambridgeanalytica.org/data-breaches-scandals/passpo...
Re: One million passports leaked online
#5That's good, just grab one of those whenever your need to prove your age online /s
Re: One million passports leaked online
#6Oh god that’s pretty bad > The documents were hosted by systems used by cannabis clubs and a company called Nefos, which operates PuffPal, a platform that manages membership and age verification for cannabis retailers and clubs across Europe. The infrastructure storing these identity documents—full passport scans, driver’s licenses with photos, names, and identifying numbers—was left completely unprotected on publicl…
The EU's verification laws will ensure much more of these leaks in the future, and therefore much more fines
Re: One million passports leaked online
#7[stub for offtopicness]
Could we update the link to the original article? https://cambridgeanalytica.org/data-breaches-scandals/passpo...
CA article is just AI;dr on a two week old Verge article: https://www.theverge.com/tech/947157/passports-data-breach-c...
Re: One million passports leaked online
#8Earlier quoted context omitted.
Could we update the link to the original article? https://cambridgeanalytica.org/data-breaches-scandals/passpo...
CA article is just AI;dr on a two week old Verge article: https://www.theverge.com/tech/947157/passports-data-breach-c...
Ok, then changing the link to the verge article. Thanks for pointing that out
Re: One million passports leaked online
#9The lack of security is one thing, but why have they retained the information at all!
iirc, one of the elements of GDPR is "storage limitation", i.e. you must not keep personal data for longer than you need it - and in this case, the data is only needed to verify the age of the user, and shouldn't ever be required again (unless people can now get younger).
Once a document has been used to verify a person's identity and that the person is of legal age, there is no reason to retain a copy of the document any more.
It would be reasonable and fair to retain a photo of the user to verify that the person matches the account, but that's it.
Re: One million passports leaked online
#10Oh god that’s pretty bad > The documents were hosted by systems used by cannabis clubs and a company called Nefos, which operates PuffPal, a platform that manages membership and age verification for cannabis retailers and clubs across Europe. The infrastructure storing these identity documents—full passport scans, driver’s licenses with photos, names, and identifying numbers—was left completely unprotected on publicl…
The EU's verification laws will ensure much more of these leaks in the future, and therefore much more fines
Yep… not sure about more fines, but for sure more leaks