Nearly a million passports and photo IDs were left unprotected on the public internet

An estimated 940,000 passports and photo identification cards were exposed online due to a misconfigured cloud storage bucket. The data, discovered by security researcher Jeremiah Fowler of the cybersecurity firm SafetyDetectives, included images of official documents such as German passports and Spanish driver's licenses. Fowler found the unsecured data by searching publicly accessible cloud storage repositories. The exact owner of the data has not been publicly identified, but the exposure highlights ongoing risks associated with cloud data storage. This incident underscores the critical need for robust security configurations to prevent sensitive personal information from falling into the wrong hands. The exposed documents contained personal details that could be exploited for identity theft and other fraudulent activities. Fowler's investigation, published on March 19, 2024, detailed the nature of the exposed files and the ease with which they were accessed. The sheer volume of documents suggests a significant breach of personal privacy, impacting individuals across multiple countries.