Photo booth company exposes customer photos due to security flaw

A photo booth company, Hama Film, has been exposing customer photos and videos online due to a significant security flaw in its website's file storage system. The vulnerability was discovered by a security researcher known as Zeacer, who alerted TechCrunch to the issue after Hama Film failed to respond to earlier reports. This incident highlights ongoing challenges in data security for companies handling sensitive customer information, with further coverage provided by TechCrunch.

The security flaw allowed unauthorized access to images and videos captured by Hama Film's photo booths, which are franchised in Australia, the United Arab Emirates, and the United States. Zeacer provided evidence of the exposed data, including pictures of young people.

While the company has reportedly reduced the exposure time of photos from weeks to 24 hours, the vulnerability remains exploitable daily, allowing potential attackers to download all stored content. At one point, over 1,000 photos from Hama Film booths in Melbourne were found online.

Source: TechCrunch