Nearly a million passports and photo IDs exposed online by Cannabis Club Systems
By
Sean Hollister
An everything bagel for the brain. Substantive, layered, well-seasoned.
Summary
A security researcher discovered that Cannabis Club Systems (Nefos Solutions) left nearly a million passports and photo IDs exposed on the public internet with no password protection or access controls. The documents of individuals from multiple countries were accessible at public URLs, creating a massive identity theft and fraud risk. The article highlights the ongoing problem of companies failing to secure sensitive personal data.
Key quotes
· 3 pulledTyping a few letters and numbers into my web browser, I find myself gaping at the identity documents of complete strangers.
They were all sitting unprotected at public URLs, with no password or access control of any sort.
We have to do something about it as fast as possible, because people will find this and resell it.
You might also wanna read
Medical Cannabis Patient Data Breach Exposes Sensitive Health Records in Ohio
A security researcher discovered an unsecured database containing nearly a million sensitive medical records of Ohio medical cannabis patien
wired.com·10mo ago
Unsecured Database Exposes 149 Million Login Credentials Without Protection
Security researcher Jeremiah Fowler discovered an unsecured database containing 149 million unique login credentials including emails, usern
techrepublic.com·4mo ago
Discord Data Breach Exposes Government ID Photos of 70,000 Users
Discord has disclosed that approximately 70,000 users may have had their government ID photos exposed in a data breach involving a third-par
theverge.com·8mo ago
Security Researchers Find Widespread Exposure of Sensitive Passwords and Credentials Online
The article discusses the widespread problem of users exposing sensitive credentials like passwords, secrets, and keys on public websites an
labs.watchtowr.com·6mo ago
Discord Age Verification Service Hacked, 70,000 Users' ID Photos Stolen
Discord experienced a data breach where hackers stole official ID photos and personal information of approximately 70,000 users from a third
news.sky.com·8mo ago
Instagram Data Breach Exposes Personal Information of 17.5 Million Users
A data breach at Instagram exposed sensitive personal information of 17.5 million users, including usernames, physical addresses, phone numb
engadget.com·5mo ago