Leak of 1M+ passports and driving licences from Tabiq (Reqrea)

Colleagues, please note: in cybersecurity — a mass data leak from a hotel registration system.

Researcher Anurag Sen found an S3 bucket “tabiq” publicly accessible; it contained passports, driving licences and guests’ selfies (files since 2020), indexed by GrayHatWarfare.

Reqrea closed the bucket after TechCrunch and JPCERT notification, is investigating and will notify victims; it is unclear who else had access.

Why it matters: the incident underscores that misconfigurations — not only hackers — are the principal threat.

What quick measures would you implement when handling clients’ documents?

#cybersecurity #data #privacy #infosec