A security lapse at prison pay phone service Pay Tel publicly exposed over 300K callers’ driver’s licenses

TechCrunch reports that security researchers at UpGuard found a publicly accessible Microsoft Azure storage server owned by prison calling provider Pay Tel that exposed at least 300,000 driver’s license scans and other government-issued IDs, inmate communications, photos containing precise geolocation, and financial records. The server lacked password protection, UpGuard notified Pay Tel on May 7, and the company has not publicly acknowledged the incident or confirmed notifications to affected individuals or regulators.