A TechCrunch investigation has discovered {that a} web site known as the UK Visa Portal is publishing the passports and selfies of candidates who’ve registered and paid a price to acquire a UK immigrant visa.
An nameless individual alerted TechCrunch to the safety lapse, saying not less than 100,000 paperwork of people that uploaded their passports or selfies to the web site as a part of the appliance course of have been publicly obtainable on the web site.
This web site isn’t affiliated with the UK Authorities. some have complained They stated they mistakenly paid the price to this firm as an alternative. Use the GOV.UK official website.
TechCrunch confirmed it UK visa portal was the supply of the info breach and confirmed the authenticity of the leaked knowledge by contacting affected people and asking if the knowledge was correct.
The UK Visa Portal doesn’t have a solution to report safety points by means of its web site, and the web site doesn’t listing the names or contact data for its administration crew. TechCrunch despatched an e mail to the tackle listed on the UK Visa Portal web site, alerting the corporate to the persevering with safety flaw and asking who in administration might settle for particular particulars for resolving the problem. TechCrunch defined that because of the delicate nature of the leaked knowledge, particulars can’t be shared with the corporate’s basic buyer assist inbox because it can’t assure that the leaked knowledge won’t be misused.
As an alternative, TechCrunch heard a response from a public relations agency that’s stated to be the corporate’s legal professional. TechCrunch reiterated that given the character of the leaked information, particulars can solely be shared immediately with firm administration and requested TechCrunch to contact them.
TechCrunch has not but obtained a response from UK Visa Portal administration. The safety flaw has not but been mounted.
Whereas the safety points persist, TechCrunch believes it’s within the public curiosity for individuals utilizing the corporate’s providers to pay attention to the problems. TechCrunch isn’t publishing precise particulars to reduce additional danger to the knowledge.
There isn’t a want to make use of a third-party service to use for a UK digital journey authorization until you will have employed an immigration lawyer. Apply via the UK government website.
In the event you purchase by means of hyperlinks in our articles, we might earn a small fee. This doesn’t have an effect on editorial independence.
