Portpass app may have exposed hundreds of thousands of users' personal data [View all]
Private proof-of-vaccination app Portpass exposed personal information, including the driver's licences, of what could be as many as hundreds of thousands of users by leaving its website unsecured.
On Monday evening, CBC News received a tip that the user profiles on the app's website could be accessed by members of the public.
CBC is not sharing how to access those profiles, in order to protect users' personal information, but has verified that email addresses, names, blood types, phone numbers, birthdays, as well as photos of identification like driver's licences and passports can easily be viewed by reviewing dozens of users' profiles.
snip
CBC called Hussein late Monday, and agreed to hold off on publishing an article on the lapse until late Tuesday morning in order to give his team time to lock down the site and protect user information.
The portpassportal.com web app was pulled offline that evening and users of the mobile app were met with "Network error" pop-up messages if they attempted to upload or modify any information.
more
https://www.cbc.ca/news/canada/calgary/portpass-privacy-breach-1.6191749
Yikes, this is very bad, imo. I kept my paper printout and didn't go anywhere to get another piece of proof like a driver license-sized proof of vaccination. I know a lot of people did go to the gov't site over the weekend.
***To be clear, this is NOT the government site, it is a privately owned site.
= new reply since forum marked as read