UK Visa Portal exposed thousands of applicants’ passports and selfies — then called the lawyers on us

TechCrunch found that UK Visa Portal (not affiliated with the U.K. government) publicly exposed thousands—reportedly up to ~100,000—of applicants' passport images, selfies, and embedded location metadata via an Amazon-hosted storage bucket that was accessible due to a backend bug; the company did not promptly respond to responsible disclosure, the data was secured only after publication, and the exposure poses serious privacy risks including potential home address disclosure.