A website called UK Visa Portal has reportedly exposed passport copies and selfie photos of people who used the platform to apply for a U.K. immigration visa.
According to TechCrunch, the exposed files belong to applicants who signed up and paid the website as part of their visa application process.
An anonymous source alerted TechCrunch about the security issue and claimed that at least 100,000 documents were publicly accessible. These documents reportedly included passports and selfie images that users uploaded during the application process.
UK Visa Portal is not connected to the U.K. government. Some users have also complained that they mistakenly paid the company instead of applying through the official GOV.UK website.
TechCrunch said it confirmed that UK Visa Portal was the source of the exposed data and verified the authenticity of some files by contacting affected individuals. The people contacted reportedly confirmed that the exposed information was accurate.
The website does not appear to provide a clear way to report security problems. It also does not list names or contact details for company management. TechCrunch said it emailed the address listed on the website to warn the company about the ongoing security lapse and asked for a management contact who could receive specific details about the issue.
Because the exposed files contain highly sensitive personal information, TechCrunch said it did not share technical details with the general customer support inbox. The publication said it could not be sure that the information would not be misused if sent there.
Instead of hearing directly from company management, TechCrunch said it received responses from the company’s supposed attorneys and public relations firm. TechCrunch again asked to be put in touch with management so it could safely share details needed to fix the issue.
As of the report, TechCrunch said it had not received a response from UK Visa Portal’s management, and the security lapse remained unresolved. The publication also said it was not publishing precise details of the issue to avoid putting users’ information at further risk.
People applying for a U.K. electronic travel authorization do not need to use a third-party website unless they are working with an immigration lawyer. Applicants should use the official U.K. government website for such applications.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
