Massive Passport Canada data leak

The Passport Canada website has a grave security flaw that allows easy access to the personal information (birth certificate, driver's license, dates of birth, social insurance numbers) of passport applicants.

The breach was discovered last week by an Ontario man completing his own passport application. He found he could easily view the applications of others by altering one character in the Internet address displayed by his Web browser.

"I was expecting the site to tell me that I couldn't do that," said Jamie Laning of Huntsville. "I'm just curious about these things so I tried it, and boom, there was somebody else's name and somebody else's data."

Link

(Thanks, Glyn!)

source