US Customs Loses Photos, Travel Docs, and License Plate Data in Breach

US Customs Loses Photos, Travel Docs, and License Plate Data in Breach

US Customs and Border Protection (CBP) has confirmed that a data breach has exposed the personal information of travelers into and out of the US. The data reportedly includes photos and travel documents, but the real problem here is the data wasn’t even being stored on a CBP network. The agency points the finger at an unnamed contractor, which copied CBP data to its network where it was later stolen.

According to CBP, it learned about the breach in late May. The agency, which is responsible for enforcing border security and customs, says its network was not the target of the attack. The unnamed subcontractor reportedly moved the data to its own network in violation of CBP regulations. Although, someone at CBP allowed the company sufficient access that it was able to exfiltrate an unknown volume of sensitive data. CBP’s hands are not clean in this. Civil liberties groups place the blame on CBP for collecting and retaining the data in the first place.

It’s hard to know exactly what was leaked and how many travelers are affected because of the nature of the breach. So far, the CBP has only said it includes photos, images of passports/visas, and images of license plates. It could be millions of people, including US citizens and foreign nationals. On the other hand, the subcontractor might have only copied a small amount of data without authorization.

A Perceptics vehicle ID camera.
A Perceptics vehicle ID camera.

CBP also has yet to name the subcontractor, but the document describing the attack has the name “Perceptics” in the title. That firm claims to provide all the license plate readers used at US borders. The photos in question are most likely the ones taken by border patrol when checking documents. Further reporting notes that airport operations haven’t been impacted, suggesting the data is limited to land crossings. Recent reports from media outlets have claimed that data stolen from Perceptics is available in various locations around the dark web. We don’t yet know if these events are connected, but it seems like a safe bet.

Border patrol has been working on a facial recognition system that has been roundly criticized for its accuracy and usefulness, but there’s no evidence Perceptics has any connection to that system. Although, if you wanted to build a facial recognition database, a cache of photographs paired with government-issued IDs like a passport would be the perfect data set.

Top photo credit: US Customs and Border Patrol

Continue reading

Google Kills Free Photo Storage, Changes What Counts Toward Storage Caps
Google Kills Free Photo Storage, Changes What Counts Toward Storage Caps

Google has announced some significant changes to Photos, especially if you use the service for automatic backup.

Apple’s M1 Continues to Impress in Cinebench R23, Affinity Photo
Apple’s M1 Continues to Impress in Cinebench R23, Affinity Photo

New Cinebench R23 benchmarks paint AMD in a more competitive light against the M1, but Apple's SoC still acquits itself impressively. The Affinity Photo benchmark, however, is a major M1 win.

Intel’s 10nm Sapphire Rapids CPU Delidded, Photographed
Intel’s 10nm Sapphire Rapids CPU Delidded, Photographed

Intel's Sapphire Rapids has been sighted in the wild. It looks as if Intel will hook the chip together a bit differently than AMD does, at least at the moment.

Deep Nostalgia Animates Your Old Family Photos
Deep Nostalgia Animates Your Old Family Photos

Genealogy firm MyHeritage has launched an online tool called Deep Nostalgia that can animate your old family photos — or really, any photo with a face. It's both fascinating and deeply unsettling at times.