Unprotected database that contained the data of passengers, United Kingdom

Details of passengers who have made use of the free wi-fi access at a number of stations in the Uk were online, via a non-secure database. It reports to the BBC.

It is, in any case, at the railway stations, Harlow Mill, Chelmsford, Colchester, Waltham Cross, Burnham, of Norwich, and the London Bridge. The database identified the e-mail addresses of more than 10,000 different users, and even the 146 million of the other data.

the Wi-fi service provider C3UK, the database is now offline and says it has no reason to believe that someone else is in the system. There are no passwords to be found in the database.

However, the data will be searchable by user name. That is, it would not have been possible to get the travel behaviour of individual travellers to follow suit.

The database contained information from the period from november 28, 2019 12 February 2020.

See also: Why are there so many data breaches due to insecure databases?