Over 750,000 Applications for US Birth Certificate Copies Exposed Online

This is a major security breach. An online company that allows users to obtain a copy of their birth and death certificates from U.S. state governments has exposed a massive cache of applications — including their personal information.

More than 752,000 applications for copies of birth certificates were found on an Amazon Web Services (AWS) storage bucket. The bucket, owned by a Barcelona-based company Onlinevitalus, wasn’t protected with a password, allowing anyone who knew the easy-to-guess web address access to the data.

The data exposed was for APPLICATIONS for birth certificate copies, not for copies of the birth certificates themselves. Even so, each application contained a lot of personal information that is not supposed to be exposed, including: the applicant’s name, date-of-birth, current home address, email address, phone number and historical personal information, including past addresses, names of family members and the reason for the application — such as applying for a passport or researching family history.

You can read more in an article by Zack Whittaker in the TechCrunch web site at: https://techcrunch.com/2019/12/09/birth-certificate-applications-exposed/.

3 Comments

Why is a Barcelona, Spain company processing U.S applications for copies of birth certificates???

Like

    Because they can. I did a Google search for this company and found many complaints from people they had cheated. They charge $49.00, and at best, send the customer a blank form to apply to the state in question (and the person still has to pay the state fee). At worst, they don’t do anything. They take advantage of people who can’t figure out how to contact the birth state directly.

    Like

I used the services from this company, and I didn’t have any problem (even if they are not based in the US). Their team made things easy. I needed my birth certificate, and they handled it.

Like

Leave a Reply

Name and email address are required. Your email address will not be published.

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

You may use these HTML tags and attributes:

<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <pre> <q cite=""> <s> <strike> <strong> 

This site uses Akismet to reduce spam. Learn how your comment data is processed.

%d bloggers like this: