Tech Desk: An alarming security lapse has exposed sensitive personal data, including passports and selfie photos, of an estimated 100,000 applicants through an unofficial “UK Visa Portal.” TechCrunch has learned that this third-party website, which applicants mistakenly pay for visa services, has publicly spilled these critical documents online, posing a severe privacy risk. Crucially, the site is not affiliated with the UK government’s official GOV.UK platform.

Despite being notified by an anonymous source and subsequently confirming the UK Visa Portal data leak, TechCrunch’s attempts to contact the company’s management directly to resolve the vulnerability have been met with silence. The website currently lacks proper security reporting channels, and information provided to their general customer support and purported legal representatives failed to prompt a fix. This means the extensive data exposure remains ongoing.

The exposed information includes highly sensitive identity documents, placing individuals at risk of fraud and other malicious activities. Many applicants, unaware of its unofficial status, have paid fees to this portal believing it to be the legitimate service.

This incident underscores the critical importance of vigilance when applying for official documents. Authorities advise that it is unnecessary to use third-party services for UK electronic travel authorization unless retaining an immigration attorney. All applicants should exclusively use the official UK government website, GOV.UK, to ensure their personal data remains secure and protected.