A Melbourne travel agency has suffered a data breach which has compromised over 100,000 personal records.
Travel agency Inspiring Vacations said it was breached in November.
It is thought to impact several thousand customers.
Data such as passport numbers and travel booking information were exposed online.
A cybersecurity researcher who discovered the breach said its cloud storage was misconfigured allowing unprotected access to the customer data.
“Passport data could be used for identity theft, allowing criminals to open accounts, apply for credit cards, or conduct fraudulent activity,” said Jeremiah Fowler.
“Once I saw this and I saw potentially sensitive documents, that’s when I knew I had to contact the company.”
