A hotel check-in system left a million passports and driver’s licenses open for anyone to see

A hotel check-in platform in Japan, Tabiq, exposed more than 1 million identity records online through a publicly accessible Amazon storage bucket.

The leaked data included passports, driver’s licenses, and selfie verification photos, creating a serious fraud and misuse risk for travelers.

Security researcher Anurag Sen found the bucket, and TechCrunch alerted the company and Japan’s cyber team.

Reqrea says it secured the bucket and is now investigating how much data was exposed.