Public Amazon Bucket Leaks Sensitive Guest Data from Japanese Hotel Platform Tabiq

A misconfigured Amazon cloud storage bucket exposed over 1 million sensitive records from Tabiq, a Japanese hotel check-in platform operated by Reqrea. The leaked data included passports, driver’s licenses, and selfie verification photos belonging to hotel guests. The exposure resulted from an unsecured public bucket, though no specific timeline or date of discovery was provided. The incident highlights a security lapse in cloud storage configuration without further technical details on the bucket’s settings or access controls. No CVE ID or additional vulnerabilities were mentioned in the report.