Calgary police investigate data breach involving vaccine verification app PORTpass
Calgary police say its cybersecurity team is investigating after the Calgary-based vaccine verification app PORTpass left some users' data unsecured and available to be viewed by the public last week.
The company pulled it from the Apple and Google Play app stores and its website says the "team at PORTpass is currently updating."
A news tip sent to CTV News and other media outlets last week pointed out a security flaw that allowed anyone to access profile information of PORTpass users.
The pages displayed the name, email address, blood type, postal code, date of birth and phone number of registered PORTpass users. The page also contained a link to the photo identification submitted by a user, including their driver's licence or passport.
The company's online web portal was pulled down the evening of Sept. 27 and is not yet back up and running.
It is not known for how long users' data was able to be viewed publicly and how many accounts were compromised, though PORTpass CEO Zakir Hussein said he believed fewer than 500 accounts were impacted.
CTV News has not been able to verify exactly how many accounts had data that was publicly accessible.
Hussein told CTV News on Wednesday that PORTpass informed Calgary police of the potential data breach and he was aware of the investigation.
The CEO said the company plans to release a statement about what led to the data breach.
"Hopefully people can, you know, realize what just happened here. It was crazy," he said. Further information will be in the company statement, he added.
PORTpass was initially recommended by the Calgary Sports and Entertainment Corporation (CSEC) to be used at its venues to allow for easier entry into games. CSEC, which owns the Flames and Stampeders, has since updated its proof of vaccination guidelines online and is encouraging fans to bring paper copies of their vaccination records instead.
The Calgary Police Service is asking anyone who believes their data was compromised to contact the non-emergency line at 403-266-1234.
CTVNews.ca Top Stories
BREAKING King Charles' cancer treatment progressing well, says Buckingham Palace
King Charles III’s doctors are 'sufficiently pleased' with his cancer treatment and he is expected to return to public-facing duties, Buckingham Palace announced on Friday.
BREAKING Orca calf that was trapped in B.C. lagoon for weeks swims free
An orca whale calf that has been stranded in a B.C. lagoon for weeks after her pregnant mother died swam out on her own early Friday morning.
'Unacceptable': Trudeau reacts after AFN chief says headdress taken from plane cabin
After the Assembly of First Nations' national chief said her headdress was taken from an airplane cabin this week, Prime Minister Justin Trudeau called the incident 'unacceptable' and a 'mistake' on the part of Air Canada.
Sophie Gregoire Trudeau on navigating post-political life, co-parenting and freedom
Sophie Gregoire Trudeau says there is 'still so much love' between her and Prime Minister Justin Trudeau, as they navigate their post-separation relationship co-parenting their three children.
From faulty kids' cribs to flammable kids' bathrobes, here are the recalls of the week
Health Canada issued recalls for various items this week, including kids’ bathrobes, cribs and henna cones.
Taylor Swift dons Montreal designer's dress in 'Fortnight' video
A pair of Montreal designers' work has now been viewed over 41 million times. Taylor Swift dons a Victorian throwback black gown in her latest music video, 'Fortnight', designed by UNTTLD due Simon Belanger and Jose Manuel Saint-Jacques.
'Too young to have breast cancer': Rates among young Canadian women rising
Breast cancer rates are rising in Canada among women in their 20s, 30s and 40s, according to research by the University of Ottawa (uOttawa).
'Violation': CSIS had officer investigated after she reported a superior raped her
A CSIS officer's allegations that she was raped repeatedly by a superior in agency vehicles set off a harassment inquiry, but also triggered an investigation into her that concluded the alleged attacks were a “misuse” of agency vehicles by the woman.
'I was scared': Ontario man's car repossessed after missing two repair loan payments
An Ontario man who took out a loan to pay for auto repairs said his car was repossessed after he missed two payments.