Calgary third-party vaccination verification app pulls web portal after users' data left unsecured
A third-party vaccine verification app that was initially endorsed by the Calgary Flames' ownership group left some users' data unsecured and available to be viewed by the public, CTV News has confirmed.
The website app of Calgary-made PORTpass was pulled offline late Monday and its website now says "we are updating" on its landing page.
A news tip sent to CTV News and other media outlets on Monday evening pointed out the security flaw that allowed anyone to access profile information of PORTpass users.
The pages displayed the name, email address, blood type, postal code, date of birth and phone number of registered PORTpass users. The page also contained a link to the photo identification submitted by a user, including their driver's licence or passport.
FLAMES FANS: BRING HARD COPIES
Calgary Sports and Entertainment Corporation (CSEC) -- the group that owns the Flames, Stampeders, Roughnecks and Hitmen -- had initially encouraged fans to download PORTpass to provide easier entry into the Saddledome.
CSEC is now saying fans should bring hard copies of their vaccination records to future games.
"CSEC is reviewing issues that have arisen with respect to the use of the PORTpass app and will release further information as appropriate," a statement on the Flames' website reads.
PORTpass CEO Zakir Hussein says he ordered his team to take down their web portal Monday after he found out that user information was publicly available online.
"I'm waiting to hear back from our audit teams here to make sure... where are we going wrong? Where are these holes? What needs to get fixed?" Hussein said Tuesday.
He added that he has two companies auditing the PORTpass security and privacy systems and he is unsure of how many user profiles were affected by the breach.
"Personally, I don't know. I don't yet, but it was definitely not in the hundreds of thousands or thousands or five hundred," he said.
CTV News is unable to verify how many user profiles were affected and for how long their personal information would have been available publicly online.
"We are working on figuring out exactly what happened here and obviously we're going to make this better," Hussein said.
Alberta's Office of the Information and Privacy Commissioner of Alberta said it is contacting PORTpass to remind them about reporting its privacy breach.
"Under Alberta’s Personal Information Protection Act (private sector privacy law), if an organization experiences a breach and determines that there is a real risk of significant harm to affected individuals, it must report the incident to the Commissioner and notify affected individuals," reads a statement from the province's privacy commissioner.
CTVNews.ca Top Stories
B.C. tenants evicted for landlord's use after refusing large rent increase to take over neighbouring suite
Ashley Dickey and her mother rented part of the same Coquitlam duplex in three different decades under three different landlords.
Mountain guide dies after falling into a crevasse in Banff National Park
A man who fell into a crevasse while leading a backcountry ski group deep in the Canadian Rockies has died.
Expert warns of food consumption habits amid rising prices
A new survey by Dalhousie University's Agri-Food Analytics Lab asked Canadians about their food consumption habits amid rising prices.
MPP Sarah Jama asked to leave Ontario legislature for wearing keffiyeh
MPP Sarah Jama was asked to leave the Legislative Assembly of Ontario by House Speaker Ted Arnott on Thursday for wearing a keffiyeh, a garment which has been banned at Queen’s Park.
Charlie Woods, son of Tiger, shoots 81 in U.S. Open qualifier
Charlie Woods failed to advance in a U.S. Open local qualifying event Thursday, shooting a 9-over 81 at Legacy Golf & Tennis Club.
Ex-tabloid publisher testifies he scooped up possibly damaging tales to shield his old friend Trump
As Donald Trump was running for president in 2016, his old friend at the National Enquirer was scooping up potentially damaging stories about the candidate and paying out tens of thousands of dollars to keep them from the public eye.
Here's why provinces aren't following Saskatchewan's lead on the carbon tax home heating fight
After Prime Minister Justin Trudeau said the federal government would still send Canada Carbon Rebate cheques to Saskatchewan residents, despite Saskatchewan Premier Scott Moe's decision to stop collecting the carbon tax on natural gas or home heating, questions were raised about whether other provinces would follow suit. CTV News reached out across the country and here's what we found out.
Montreal actress calls Weinstein ruling 'discouraging' but not surprising
A Montreal actress, who has previously detailed incidents she had with disgraced Hollywood producer Harvey Weinstein, says a New York Court of Appeals decision overturning his 2020 rape conviction is 'discouraging' but not surprising.
Caleb Williams, Jayden Daniels and Drake Maye make it four NFL drafts with quarterbacks going 1-3
Caleb Williams is heading to the Windy City, aiming to become the franchise quarterback Chicago has sought for decades.