Calgary police investigate data breach involving vaccine verification app PORTpass
![PORTpass, vaccination, app, flames, calgary Hours before the Flames' first preseason game at the Saddledome on Sunday, PORTpass announced it was experiencing technical difficulties and told fans to bring paper copies of their vaccination record to the game instead.](/content/dam/ctvnews/en/images/2021/9/27/portpass--vaccination--app--flames--calgary-1-5602713-1632784449438.jpg)
Calgary police say its cybersecurity team is investigating after the Calgary-based vaccine verification app PORTpass left some users' data unsecured and available to be viewed by the public last week.
The company pulled it from the Apple and Google Play app stores and its website says the "team at PORTpass is currently updating."
A news tip sent to CTV News and other media outlets last week pointed out a security flaw that allowed anyone to access profile information of PORTpass users.
The pages displayed the name, email address, blood type, postal code, date of birth and phone number of registered PORTpass users. The page also contained a link to the photo identification submitted by a user, including their driver's licence or passport.
The company's online web portal was pulled down the evening of Sept. 27 and is not yet back up and running.
It is not known for how long users' data was able to be viewed publicly and how many accounts were compromised, though PORTpass CEO Zakir Hussein said he believed fewer than 500 accounts were impacted.
CTV News has not been able to verify exactly how many accounts had data that was publicly accessible.
Hussein told CTV News on Wednesday that PORTpass informed Calgary police of the potential data breach and he was aware of the investigation.
The CEO said the company plans to release a statement about what led to the data breach.
"Hopefully people can, you know, realize what just happened here. It was crazy," he said. Further information will be in the company statement, he added.
PORTpass was initially recommended by the Calgary Sports and Entertainment Corporation (CSEC) to be used at its venues to allow for easier entry into games. CSEC, which owns the Flames and Stampeders, has since updated its proof of vaccination guidelines online and is encouraging fans to bring paper copies of their vaccination records instead.
The Calgary Police Service is asking anyone who believes their data was compromised to contact the non-emergency line at 403-266-1234.
CTVNews.ca Top Stories
![](https://www.ctvnews.ca/polopoly_fs/1.6124360.1666787603!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg)
BREAKING Terrorism charges laid against B.C. woman who married ISIS fighter
A B.C. woman who was repatriated from a Syrian prison camp in 2022 has been arrested and charged with terrorism offences, police announced Saturday.
Woman dies at Rolling Stones concert in Vancouver
A woman attending the Rolling Stones concert at BC Place died Friday night, police confirmed.
ANALYSIS Why are Trudeau and Singh avoiding Stampede this year?
This year, only Conservative leader Pierre Poilievre will be saddling up for the event, while both Prime Minister Justin Trudeau and NDP leader Jagmeet Singh will stay away.
Saskatoon man charged for leaving hate comments on woman’s obituary pleads guilty
The man who left hate comments on a murder victim’s online obituary has been sentenced.
Gold from Toronto Pearson heist likely in India or Dubai: police
Police believe that the majority of gold stolen from Toronto Pearson International Airport in 2023 has been smuggled, sold and melted overseas.
Vikings' Khyree Jackson, 2 former high school teammates killed in car crash in Maryland
Minnesota Vikings rookie cornerback Khyree Jackson and two of his former high school teammates were killed in an early morning car crash Saturday in Maryland, police and the team said.
4 killed in shooting during party at a Kentucky home; suspect died after a vehicle chase, police say
Four people were killed and three others were wounded in an early Saturday shooting during a party at a home in northern Kentucky, police said.
Biden’s ABC interview does nothing to quell the existential crisis around his campaign
U.S. President Joe Biden’s struggle to prove he’s got the strength and cognitive capacity for a second term is becoming an excruciating personal and national ordeal, writes CNN's Stephen Collinson.
Human remains found wrapped in sleeping bag and left out for trash pickup in NYC
Decomposing human remains have been found wrapped in a sleeping bag and left out on the sidewalk for trash collection in Manhattan, New York City police said Saturday.