Millions of lease documents left exposed on Australian real estate agent apps due to lax security.
A digital researcher has found that several popular rental platforms in Australia are leaving millions of sensitive tenant and landlord records at risk, exposing individuals' personal information to potential hackers. The researcher discovered that many online platforms used by real estate agents to upload documentation for renters and landlords contain links that can be scanned by web crawlers and cached, making the documents easily accessible online.
The research found six examples of rental agreements, employer references, and other sensitive documents available online, with some platforms requiring only a randomised character to access. Another platform uses URL shorteners, which can be easily guessed, allowing hackers to gain access to entire rental histories and maintenance records.
Some platforms have taken steps to address the issue, including Inspection Express, which has upgraded its security measures to include document links that expire after a limited number of accesses or a defined time window. However, others have not responded to requests for comment, leaving many concerned about the lack of care for privacy and security in the industry.
Digital rights advocate Samantha Floreani said the research is "appalling" and highlights a "blatant disregard for the law and people's security." She warned that left unchecked, these companies are putting an enormous number of Australians at risk, particularly renters who have limited power to refuse using these systems due to potential retaliation.
The Office of the Australian Information Commissioner has stated that it is currently scrutinising rent tech platforms, citing the increasing demands for personal information as a "key priority" this year. The regulator's efforts come as more Australians rely on online rental platforms, highlighting the need for improved security measures to protect sensitive data.
A digital researcher has found that several popular rental platforms in Australia are leaving millions of sensitive tenant and landlord records at risk, exposing individuals' personal information to potential hackers. The researcher discovered that many online platforms used by real estate agents to upload documentation for renters and landlords contain links that can be scanned by web crawlers and cached, making the documents easily accessible online.
The research found six examples of rental agreements, employer references, and other sensitive documents available online, with some platforms requiring only a randomised character to access. Another platform uses URL shorteners, which can be easily guessed, allowing hackers to gain access to entire rental histories and maintenance records.
Some platforms have taken steps to address the issue, including Inspection Express, which has upgraded its security measures to include document links that expire after a limited number of accesses or a defined time window. However, others have not responded to requests for comment, leaving many concerned about the lack of care for privacy and security in the industry.
Digital rights advocate Samantha Floreani said the research is "appalling" and highlights a "blatant disregard for the law and people's security." She warned that left unchecked, these companies are putting an enormous number of Australians at risk, particularly renters who have limited power to refuse using these systems due to potential retaliation.
The Office of the Australian Information Commissioner has stated that it is currently scrutinising rent tech platforms, citing the increasing demands for personal information as a "key priority" this year. The regulator's efforts come as more Australians rely on online rental platforms, highlighting the need for improved security measures to protect sensitive data.