UK Visa Portal website actively leaking passport data and selfie images

The UK Visa Portal website is reportedly exposing the passports and selfie photos of individuals who used its services to obtain a UK immigration visa. TechCrunch learned of the security lapse from an anonymous source, who reported that at least 100,000 uploaded documents were exposed during the application process. TechCrunch confirmed the website as the source of the data leak and verified the authenticity of the files by contacting affected individuals.

The website is not connected to the UK government, and users have reported mistakenly paying a fee to this company instead of accessing the official GOV.UK website. The security vulnerability, however, remains unfixed, and the company lacks an official channel to report security issues or any public contact information for its management.

TechCrunch contacted the email address listed on the website to alert the company, but only received a response from the company's legal representatives and public relations firm. Despite requests to be put in touch with management to securely share the specific details, TechCrunch has received no response from executives. 

Training announcement: Freevacy provides comprehensive training for new and existing practitioners on the changes introduced by the DUA Act to the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018 (DPA18), and the Privacy and Electronic Communications Regulations 2003 (PEC-Regulations). Our courses are always up to date and provide a forum for learning and discussing how to ensure your data protection processes remain compliant. Find out more.