UK Visa Portal

DISCLOSED 2026-05-27 · MISCONFIG

The UK Visa Portal publicly exposed thousands of applicants' passports and selfies. The exposure appears to be due to a misconfiguration that made the data accessible. No threat actor or attack method was identified.

The record

What we know

Disclosed

2026-05-27

Attack vector

Misconfig

Sector

government

Country

Data classes exposed

passportsselfies

Sources

Cited reporting

↗ techtost.com (2026-05-27)

Similar vector · recent

Other misconfig breaches on file

This page is the permanent ColdRecon entry for the UK Visa Portal disclosure. It updates if new public reporting emerges. All tracked breaches →

UK Visa Portal just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →