UK Visa Portal exposed thousands of applicants’ passports and selfies — then called the lawyers on us

UK Visa Portal publicly exposed applicants’ uploaded files, including passports and selfies, in a misconfigured Amazon storage bucket.

The leak affected highly sensitive identity documents and may have included location data, raising risks of fraud and identity theft.

After disclosure, the data was secured, but the company did not directly address the incident.

The exposure could trigger breach-notification obligations and broader privacy and compliance concerns.