1 of 1
Story summary
- Security researcher Anurag Sen found Reqrea’s Tabiq bucket publicly viewable by anyone typing “tabiq”.
- The bucket exposed over one million passports, driver’s licenses and selfie photos, leading the firm to lock it.
- Hashimoto said the company will review logs with external counsel and notify affected guests.
- JPCERT was notified after TechCrunch’s report, joining recent breaches at Duc App and Hertz.
