PRISON PAY PHONE SERVICE EXPOSED 300K DRIVER'S LICENSES

SECURITY DESK■ 1 MIN READ

FRI, MAY 29, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Security researchers discovered a public data leak at Pay Tel, a prison telephone service provider, exposing over 300,000 callers' driver's licenses and inmate communications. The company secured the data after the vulnerability was identified.

Pay Tel, which operates pay phone systems in correctional facilities, left sensitive caller information accessible online without proper security protections. The exposed dataset included driver's license numbers and images, along with records of calls between inmates and their contacts. Security researchers notified Pay Tel of the vulnerability, prompting the company to secure the exposed information. The incident highlights persistent security gaps in services handling personal identification data. The breach affected hundreds of thousands of individuals who used prison pay phones to communicate with inmates. Details regarding the duration of the exposure and whether the data was accessed by unauthorized parties remain unclear. Pay Tel has not released a formal statement addressing the scope of the incident or remediation steps beyond securing the database. The exposure underscores broader concerns about data protection practices across third-party services managing sensitive personal information in institutional settings.

■ SOURCES

► TechCrunch

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P624US CHARGES THREE RUSSIANS FOR BULLETPROOF HOSTING

U.S. federal prosecutors have unsealed charges against three Russian nationals accused of operating a bulletproof hosting service that supported ransomware gangs responsible for over $62 million in damages worldwide.

4H AGO— Industry Desk

P620CISA ALERTS: SHAREPOINT FLAWS UNDER ACTIVE ATTACK

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that attackers are actively exploiting three vulnerabilities in Internet-exposed on-premises SharePoint Server instances. Organizations running affected versions must patch immediately.

4H AGO— Security Desk

P615TAILSCALE SSH FLAW ENABLED UNAUTHORIZED ROOT ACCESS

Tailscale disclosed a critical vulnerability in its SSH implementation that allowed attackers to gain root access through insecure argument handling. The flaw has been patched in recent versions.

7H AGO— AI Desk

P614SOCIAL NETWORKS DRIVE MILLIONS TO DEEPFAKE SITES

A new study found that social media platforms referred over 5.7 million visits to nonconsensual deepfake pornography sites between December 2025 and March 2026, with YouTube and X accounting for the majority of traffic.

9H AGO— Industry Desk

◄ BACK TO NEWS

PRISON PAY PHONE SERVICE EXPOSED 300K DRIVER'S LICENSES

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF