Pay Tel's prison communication service exposed sensitive data due to an unprotected, publicly accessible Microsoft Azure cloud server lacking a password. The server contained at least 300,000 driver's license scans, other government IDs, inmate communications, and financial records, with some documents containing embedded location metadata. This incident, the company's second in two years, has not yet been publicly acknowledged by Pay Tel, and it remains unclear if breach notification laws will be followed.
Data Security Prison communication service Pay Tel exposed hundreds of thousands of driver’s licenses May 29, 2026 Share By SC Staff (Adobe Stock) As reported by TechCrunch, prison calling service Pay Tel has experienced a significant data security lapse, exposing sensitive information of its users due to a publicly accessible cloud server. Cybersecurity firm UpGuard discovered an unprotected Microsoft Azure server managed by Pay Tel containing at least 300,000 driver's license scans and other government-issued identification documents. The server, left without a password, also exposed inmate communications, including text messages, handwritten notes, and financial records. Users signing up for Pay Tel's services are required to submit identification documents and profile photos, which were among the compromised data. Some uploaded photos contained precise location data, potentially revealing home addresses. This marks Pay Tel's second security incident in two years, following a ransomware attack in June 2025. The company has not yet publicly acknowledged the breach or stated whether it will notify affected individuals or state attorneys general as required by data breach notification laws. Source: TechCrunch SC Staff Related Encryption Apple releases quantum-resistant code and verification tools SC Staff May 27, 2026 The release includes implementations of ML-KEM and ML-DSA, two quantum-secure algorithms, along with the formal verification libraries and tools Apple developed. Data Security UK Visa Portal exposes passport and selfie photos of applicants SC Staff May 27, 2026 An anonymous source alerted TechCrunch to a security lapse on the UK Visa Portal website, stating that at least 100,000 documents, including passports and selfies, are exposed. Data Security OnlyFans user data advertised on cybercrime forum, seller claims no direct breach SC Staff May 26, 2026 A user on a cybercrime forum is selling a database of 340 million records allegedly linked to OnlyFans users for approximately $76,000. Related Events Cybercast Beyond the Hype: The Cybersecurity Trends CISOs are Keeping an Eye on in 2026 On-Demand Event Cybercast Beyond the data perimeter: Why next-generation DSPM is the foundation for modern data security On-Demand Event Virtual Conference Securing the Future of Finance: Strategies to Counter Modern Cyber Threats On-Demand Event Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Ciphertext Cyclic Redundancy Check (CRC) Data Aggregation Data Encryption Standard (DES) Data Loss Prevention (DLP) Decryption Diffie-Hellman Digital Envelope Digital Signature Digital Signature Standard (DSS) You can skip this ad in 5 seconds