UK Visa Portal third-party site exposes passport data and photos due to unsecured cloud storage (techradar.com)

• Misconfigured cloud storage without password protection
• Approximately 100,000 passports, selfies, and other documents exposed
• Predictable URLs allowed attackers to access files easily

"The UK Visa Portal, a third-party website separate from the official government service, left about 100,000 sensitive documents in an unsecured cloud repository without password protection. Files included passports, verification selfies, and other application information, exposing victims to identity theft and fraud. The predictable URL structure allowed attackers to guess links. The issue remained unfixed as of May 26, 2026."