Calgary police investigate data breach involving vaccine verification app PORTpass
Calgary police say its cybersecurity team is investigating after the Calgary-based vaccine verification app PORTpass left some users' data unsecured and available to be viewed by the public last week.
The company pulled it from the Apple and Google Play app stores and its website says the "team at PORTpass is currently updating."
A news tip sent to CTV News and other media outlets last week pointed out a security flaw that allowed anyone to access profile information of PORTpass users.
The pages displayed the name, email address, blood type, postal code, date of birth and phone number of registered PORTpass users. The page also contained a link to the photo identification submitted by a user, including their driver's licence or passport.
The company's online web portal was pulled down the evening of Sept. 27 and is not yet back up and running.
It is not known for how long users' data was able to be viewed publicly and how many accounts were compromised, though PORTpass CEO Zakir Hussein said he believed fewer than 500 accounts were impacted.
CTV News has not been able to verify exactly how many accounts had data that was publicly accessible.
Hussein told CTV News on Wednesday that PORTpass informed Calgary police of the potential data breach and he was aware of the investigation.
The CEO said the company plans to release a statement about what led to the data breach.
"Hopefully people can, you know, realize what just happened here. It was crazy," he said. Further information will be in the company statement, he added.
PORTpass was initially recommended by the Calgary Sports and Entertainment Corporation (CSEC) to be used at its venues to allow for easier entry into games. CSEC, which owns the Flames and Stampeders, has since updated its proof of vaccination guidelines online and is encouraging fans to bring paper copies of their vaccination records instead.
The Calgary Police Service is asking anyone who believes their data was compromised to contact the non-emergency line at 403-266-1234.
CTVNews.ca Top Stories
Stormy Daniels describes meeting Trump during occasionally graphic testimony in hush money trial
Stormy Daniels took the witness stand Tuesday at Donald Trump's hush money trial, describing for jurors a sexual encounter the porn actor says she had with him in 2006 that resulted in her being paid off to keep silent during the presidential race 10 years later.
Indian envoy warns of 'big red line,' days after charges laid in Nijjar case
India's envoy to Canada insists relations between the two countries are positive overall, despite what he describes as 'a lot of noise.'
Susan Buckner, who played spirited cheerleader Patty Simcox in 'Grease,' dead at 72
Susan Buckner, best known for playing peppy Rydell High School cheerleader Patty Simcox in the 1978 classic movie musical 'Grease,' has died. She was 72.
Former homicide detective explains how police will investigate shooting outside Drake's Bridle Path mansion
Footage from dozens of security cameras in the area of Drake’s Bridle Path mansion could be the key to identifying the suspect responsible for shooting and seriously injuring a security guard outside the rapper’s sprawling home early Tuesday morning, a former Toronto homicide detective says.
Jeremy Skibicki has 'uphill battle' to prove he's not criminally responsible in Winnipeg killings: legal analysts
Accused killer Jeremy Skibicki could have a challenging time convincing a judge that he is not criminally responsible for the deaths of four Indigenous women, a legal analyst says.
Alcohol believed to be a factor in boating incident after 2 men die: N.S. RCMP
Two Nova Scotia men are dead after a boat they were travelling in sank in the Annapolis River in Granville Centre, N.S., on Monday.
Northern Ont. woman makes 'eggstraordinary' find
A chicken farmer near Mattawa made an 'eggstraordinary' find Friday morning when she discovered one of her hens laid an egg close to three times the size of an average large chicken egg.
Bye-bye bag fee: Calgary repeals single-use bylaw
A Calgary bylaw requiring businesses to charge a minimum bag fee and only provide single-use items when requested has officially been tossed.
CFL suspends Argos QB Chad Kelly at least nine games following investigation
The CFL suspended Toronto Argonauts quarterback Chad Kelly for at least nine regular-season games Tuesday following its investigation into a lawsuit filed by a former strength-and-conditioning coach against both the player and club.