Breach at Australian venue-ID vendor Outabox leaks over a million patrons' biometric data
Date: 2024-04
Affected: Outabox venues' patrons
Attack vector: data-exfiltration
Category: real-world
Severity: Critical

Australian POS / facial-recognition supplier Outabox suffered a breach exposing biometric data, driver's-license scans and signatures of over a million pub and club patrons, including via a 'Have I Been Outaboxed' site set up by the attackers.


Mitigations:

Architectural layers (MAESTRO):