1m Passports and Photo id's leaked

The breach occurred when an ID verification service used by cannabis dispensaries was compromised, demonstrating a serious cyber threat that affects both individuals and organisations. This incident highlights the risks associated with storing high-value credentials in lower-trust systems and the importance of robust cybersecurity measures.

What Happened in the Passport Leak Incident?​

Nearly one million passport records, encompassing citizens from multiple countries, were leaked online. The source of the breach was an ID verification platform trusted by cannabis dispensaries to confirm customer identities. Unfortunately, this ancillary system was not as secure as the primary institutions that issue passports. Cybercriminals exploited weaknesses in the verification service, gaining unauthorised access to a vast database containing high-value credentials.


Passports are considered one of the most trusted forms of identification. When such sensitive data is stored in a system that is not designed with equivalent levels of security, it creates a significant risk. The breach did not originate from a government agency or border control but from a third-party vendor with lower trust and security standards.

• Almost one million passport records exposed
• Data from multiple countries affected
• ID verification service used by dispensaries was the source
• Third-party risk was a key factor in the breach

Click to expand...

One Million Passports Leaked Online: Cyber Threats | CyPro

One million passports leaked online highlights cyber threats and third-party risk. Learn how to protect sensitive credentials from data breaches.

cypro.co.uk