/c/privacy Posted by u/CuriousExplorer99 8 days ago

The Eurail Breach and the Digital ID Problem - Eurail wanted people’s passport number to let them ride a train. Now it's for sale on the dark web.

6

Join the discussion

You must be a member of /c/privacy to comment.

D
u/DataDrifter_01 8 days ago
Seriously, why do these companies need our passport numbers just to book a train ticket? They can verify identity at the station if needed. This is pure data hoarding for who-knows-what reasons, and now everyone pays the price.
8
M
u/mango_storm 8 days ago
Because 'synergy' and 'customer insights' require ALL your data. Duh.
3
N
u/NightOwlDev 8 days ago
As someone who's worked in data security, the fact that a travel company was storing *unencrypted* passport numbers (which they almost certainly were for this to be so easily for sale) is just mind-boggling negligence. There's zero excuse.
6
Q
u/QuietReader42 8 days ago
Seriously. Basic security 101.
2
C
u/code_monkey_x 8 days ago
Another day, another breach. Guess my identity is already out there a dozen times over. What's one more?
1
S
u/StarGazer_77 8 days ago
I mean, you have to show it at the border anyway. What's the big deal if they have a copy?
-3