The applications include information like the applicant’s name, their date of birth, current home address, email and phone number. Additionally, they included other details about people’s lives, such as their previous address, the names of their family members and the reason they applied to get the documents in the first place.
The cache includes applications dating back to 2017. The company that maintains the database has added about 9,000 applications each day since TechCrunch started looking into it. The data cache also includes some 90,400 death certificate applications, but TechCrunch says it wasn’t able to access or download those.
To make matters worse, beyond automated emails, the company hasn’t responded to messages. Amazon, meanwhile, said it would notify the company of the exposure.
While the scale of this exposure isn’t as big as we’ve seen in some past instances, it once again underscores the need for updated legislation related to how companies handle sensitive documents online. Earlier this year, a ProPublica investigation found that the medical data of some 5 million Americans was easy to obtain online. While the types of documents were different, in both cases ProPublica and TechCrunch found servers that weren’t even password protected.
All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.