Donation site for Ottawa truckers' 'Freedom Convoy' protest exposed donors' data

[Nevilledog]

Link to tweet

Tweet text:

Zack Whittaker
@zackwhittaker
New: GiveSendGo, the donation site used by the Ottawa trucker's "Freedom Convoy" protest after its GoFundMe campaign was frozen last month, left an S3 bucket open that exposed donors' passports and driver's licenses.

techcrunch.com
Donation site for Ottawa truckers’ ‘Freedom Convoy’ protest exposed donors’ data
GiveSendGo exposed passports and driver's licenses used to validate the payments of donors.
3:03 PM · Feb 8, 2022

https://techcrunch.com/2022/02/08/ottawa-trucker-freedom-convoy-exposed-donation/


*snip*

TechCrunch was tipped off to the data lapse after a person working in the security space found an exposed Amazon-hosted S3 bucket containing over 50 gigabytes of files, including passports and driver licenses that were collected during the donation process.

The researcher said they found the web address for the exposed bucket by viewing the source code of the Freedom Convoy’s webpage on GiveSendGo.

S3 buckets are used for storing files, documents or even entire websites in Amazon’s cloud but are set to private by default, and require a multi-step process before a bucket’s contents can be made public for anyone to access.

The exposed bucket had over a thousand photos and scans of passports and driver licenses uploaded since February 4, when the Freedom Convoy’s page was first set up on GiveSendGo. The filenames suggest that the identity documents were uploaded during the payments process, which some financial institutions require before they can process a person’s payment or donation.

*snip*

[tanyev]

1. Oh, so when they call themselves the #1 free Christian crowdfunding site,

they mean if you give them money they’ll give away all your information for free.

[Cha]

3. Rt TY..

[Maraya1969]

4. Not sure why a passport would be needed to donate money. Or even be on a computer

Mine is locked in a safe and no information is digitized.

[634-5789]

5. I don't have one. Never cared for travel.

[ProfessorGAC]

6. Same Here!

Like you, passports are in the fire safe.
And, I agree it seems odd to need a passport to donate money.
Perhaps a Canadian law to monitor foreign transactions to fight money laundering?

[Pobeka]

7. Identity theft coming to bunch of freedom loving idiots.

Darn.

[Nevilledog]

8. It's a real shame.

And by that I mean bwahahahaha!