Drivers participating in the FIA World Endurance Championship have have their driving licenses and ID leaked, according to a report from CyberNews.
Researchers from the website found, on June 16th, two misconfigured — publicly exposed — Google Cloud Storage buckets. Combined they held over 1.1 million files, among them passports, driving licenses, and government-issued IDs for drivers racing in the WEC.
The Google Cloud Storage buckets belong to the FIA WEC website, which is managed by the Le Mans Endurance Management company and the Automobile Club de l’Ouest (ACO), who run both the championship and the 24 Hours of Le Mans, the championship’s headline race.
It’s not known how long these storage buckets were publicly exposed, or whether they were maliciously accessed or not. But even if they weren’t, this is a massive security breach for such a high level global championship.
CyberNews has listed some recommendations to LMEM, which you can see on the report on the CyberNews website. MotorsportWeek.com has asked WEC for comment and we will update this article if or when we hear back.
