logo

Public Amazon bucket leaks sensitive guest data from Japanese hotel platform Tabiq

ID: f908f14a-f3f0-50f7-96f0-4d3db4a263b1

STIX ID: report--f908f14a-f3f0-50f7-96f0-4d3db4a263b1

Feed Name: Security Affairs

Threat Score
75/100

Date Published: 2026-05-18

Date Updated: 2026-05-18

Author: Pierluigi Paganini

...
...

**Executive summary:** A misconfigured Amazon S3 bucket for Reqrea’s Tabiq hotel check-in system left sensitive guest data — including over one million passports, driver’s licenses, and selfie verification photos from 2020 through the present — publicly accessible; a researcher alerted TechCrunch and authorities, the bucket has been locked down, and an investigation is underway to determine the scope and whether any unauthorized access occurred.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.