Skip to main content

U.S. border agency says photos of travelers stolen in cyberattack

A “malicious cyberattack” on a U.S. Customs and Border Protection subcontractor compromised photographs of travelers going into and out of the country, along with license plates, the agency said Monday.

Customers and Border Protection has known about the attack since May 31. According to agency, a subcontractor transferred the images to its network “in violation of CBP policies and without CBP’s authorization or knowledge.”

Recommended Videos

The images include fewer than 100,000 people in vehicles entering and exiting the United States “through a few specific lanes at a single land border Port of Entry over a 1.5 month period,” according to a CBP spokesperson.

Officials claim that the stolen information hasn’t shown up on the internet or dark web. The Register found files from CBP contractor Perceptics, which makes license plate readers, on the dark web last month.

CBP hasn’t confirmed which of its contractors was attacked, so it’s not clear if the two incidents are connected.

The breach drew condemnation from privacy advocates, including the Electronic Frontier Foundation (EEF).

“EFF is disappointed by reports of the theft from CBP of photos of travelers’ faces and license plates,” said the organization’s senior staff attorney Adam Schwartz. “The inherent risk of such theft is among the reasons why the government should not be amassing this sensitive information in the first place.”

Initial reports reports were unclear about whether photos of travelers entering through airports were involved in the breach, but the CBP says passport and other travel document photos were not compromised, nor were images of airline passengers. When you arrive in the U.S. after an international flight, your stop at customs may include an agent snapping a photo of you. Using facial recognition technology, the agent can then match it with a “biometric template.” That template is a string of numbers representing, say, your passport photo.

“These templates are irreversible and cannot be reverse-engineered by anyone outside of CBP to reconstruct the photo,” according to the CBP.

Customers and Border Protection says it discards” photos of U.S. citizens and exempt aliens within 12 hours of verifying their identity. It can take 14 days to delete other travelers’ photographs. According to agency rules, airports and other partners aren’t allowed to keep any traveler photos they take for identification purposes.

The breach comes at a time when some airlines are planning on using facial recognition not just at customs but for flight check-in and baggage drop, The Washington Post reports.

There are some protections if your license plate information is stolen. While the Driver’s Privacy Protection Act makes it difficult to track down someone’s personal information just from a license plate, some privacy advocates have raised concerns about the amount of data automated plate readers suck up. 

The image quality will depend on whether vehicles at the border crossing had to stop and wait for long stretches due to lots of traffic, Dr. Jennifer King, director of privacy at Stanford’s Center for Internet and Society, told Digital Trends. As for how the images could be used, “It all depends on who stole it,” she said. Criminal hackers and foreign governments would have different motives and uses for the data.

“Having more data to feed into a facial recognition system is always useful, sadly, especially high-quality images taken for that purpose, to really try to focus on identifying people,” said King.

“We’re at the point where training data is hard to find, and getting good training data is invaluable in and of itself, even if it doesn’t ultimately lead to identification of individuals, for example, in the short term,” she added.

The CBP and federal authorities are investigating the breach and monitoring for the stolen information.

Update 6/11/2019: This story was updated to include new details about the amount and type of photographs stolen and to include remarks by Dr. Jennifer King. 

Jenny McGrath
Former Digital Trends Contributor
Jenny McGrath is a senior writer at Digital Trends covering the intersection of tech and the arts and the environment. Before…
Elizabeth Olsen says that Marvel movies are ‘not really the art I consume’
Elizabeth Olsen as the Scarlet Witch in Doctor Strange in the Multiverse of Madness.

For almost a decade, Elizabeth Olsen's Scarlet Witch was a mainstay in the Marvel Cinematic Universe. After first being introduced in 2014's Captain America: The Winter Soldier, Olsen went on to star in several other Marvel films and even her own TV show. In a recent interview with NPR's Wild Card With Rachel Martin, Olsen said that she is still working to prove to the rest of Hollywood that she's more than just Marvel.

“I think I haven’t always successfully made choices in my work that are aligned with my personal taste and that is something I feel like I’m still trying to prove when I meet people,” Olsen said, explaining that her work as Scarlet Witch has shaped how the public sees her. “Especially if it’s a work type meeting and be able to express my personal taste in films and literature, and so I still think I have that to prove.”

Read more
Fantastic Four director says there are ‘no other superheroes’ in the universe of his movie
The Fantastic 4 stand on a platform in "The Fantastic Four: First Steps"

As Marvel ramps up toward Avengers: Doomsday, one of the big new additions to that cast will be the Fantastic Four. We've gotten our first glimpse at the heroes, who occupy their own retro-futuristic universe.

Now, director Matt Shakman is providing some more details on that universe, and just how far removed it is from the rest of the MCU.

Read more
Alan Cumming says that he’s ‘excited and amazed’ to be able to return to Nightcrawler
Alan Cumming as Nightcrawler in X2

There were plenty of expected names in the extended cast reveal for Avengers: Doomsday, along with a few notable absences. Perhaps the most surprising addition to the cast, though, was the return of many of the original Fox X-Men from the early 2000s trilogy. Among the most notable actors returning are Patrick Stewart, Ian McKellan, James Marsden, Rebecca Romjin, and Alan Cumming, who played Nightcrawler in X2: X-Men United.

In a recent interview with Jenna Bush-Hager and Olivia Munn, Cumming said that he was excited to be able to step back into the character after more than 20 years.

Read more