Calgary police investigate data breach involving vaccine verification app PORTpass

Calgary police say its cybersecurity team is investigating after the Calgary-based vaccine verification app PORTpass left some users' data unsecured and available to be viewed by the public last week.
The company pulled it from the Apple and Google Play app stores and its website says the "team at PORTpass is currently updating."
A news tip sent to CTV News and other media outlets last week pointed out a security flaw that allowed anyone to access profile information of PORTpass users.
The pages displayed the name, email address, blood type, postal code, date of birth and phone number of registered PORTpass users. The page also contained a link to the photo identification submitted by a user, including their driver's licence or passport.
The company's online web portal was pulled down the evening of Sept. 27 and is not yet back up and running.
It is not known for how long users' data was able to be viewed publicly and how many accounts were compromised, though PORTpass CEO Zakir Hussein said he believed fewer than 500 accounts were impacted.
CTV News has not been able to verify exactly how many accounts had data that was publicly accessible.
Hussein told CTV News on Wednesday that PORTpass informed Calgary police of the potential data breach and he was aware of the investigation.
The CEO said the company plans to release a statement about what led to the data breach.
"Hopefully people can, you know, realize what just happened here. It was crazy," he said. Further information will be in the company statement, he added.
PORTpass was initially recommended by the Calgary Sports and Entertainment Corporation (CSEC) to be used at its venues to allow for easier entry into games. CSEC, which owns the Flames and Stampeders, has since updated its proof of vaccination guidelines online and is encouraging fans to bring paper copies of their vaccination records instead.
The Calgary Police Service is asking anyone who believes their data was compromised to contact the non-emergency line at 403-266-1234.
CTVNews.ca Top Stories
BREAKING | Amber Alert for two Sask. children extended into South Dakota
An Amber Alert issued on Monday for two Saskatchewan children has been extended into South Dakota. Saskatchewan RCMP say evidence uncovered during their investigation suggests the children may be in the U.S. state.

Saskatoon woman made checklist while planning abduction, court documents allege
A Saskatoon mother made an apparent 'checklist' while planning to vanish with her son, according to court documents
EXCLUSIVE | 'Train surfer' under police investigation speaks about his dangerous adventures
The man who claims to be one of the people seen 'surfing' on the roof of a moving subway train in Toronto is speaking exclusively to CTV News about his stunts and the looming threat of a police arrest.
FBI's search of Trump's Florida estate: Why now?
The FBI's unprecedented search of former president Donald Trump's Florida residence ricocheted around government, politics and a polarized country Tuesday along with questions as to why the Justice Department – notably cautious under Attorney General Merrick Garland – decided to take such a drastic step.
Ontario nurse facing charges after alleged assault that left 2-year-old in hospital
An Ontario nurse is facing charges in connection with the alleged assault of a two-year-old boy with “significant medical limitations” in Niagara Region.
Exposure to synthetic 'forever chemical' linked to liver cancer, study finds
Exposure to synthetic ‘forever chemicals’ often polluting the environment has been linked to the most common type of liver cancer, according to a recent study.
Heavier flow, breakthrough bleeding reported among some individuals after COVID-19 vaccine: study
A new study found that people with regular menstruation cycles and those who typically do not menstruate either experienced a heavier flow or breakthrough bleeding after being vaccinated against COVID-19.
RCMP's spyware tools are 'extremely intrusive,' privacy experts say
Expressing concerns over the RCMP's yearslong use of spyware in major investigations, privacy and civil liberties experts say the previously undisclosed tools are 'extremely intrusive' and they are calling for stronger oversight and regulation of spyware Canada-wide.
Senegalese diplomat arrested by Quebec police owed former landlord more than $45,000
The detention and alleged beating by Quebec police of a Senegalese diplomat last week came as a bailiff was attempting to seize property at her residence to pay for a judgment against her.