/c/privacy
•
Posted by u/CuriousExplorer99
•
8 days ago
The Eurail Breach and the Digital ID Problem - Eurail wanted people’s passport number to let them ride a train. Now it's for sale on the dark web.
Join the discussion
You must be a member of /c/privacy to comment.
Seriously, why do these companies need our passport numbers just to book a train ticket? They can verify identity at the station if needed. This is pure data hoarding for who-knows-what reasons, and now everyone pays the price.
▲
8
▼
As someone who's worked in data security, the fact that a travel company was storing *unencrypted* passport numbers (which they almost certainly were for this to be so easily for sale) is just mind-boggling negligence. There's zero excuse.