A photo booth company that caters to weddings, lobbying events in D.C., and engagement parties has exposed a cache of peoples\u2019 photos, with the revellers likely unaware that their sometimes drunken antics have been collected and insecurely stored by the company for anyone to download. A security researcher who flagged the issue to 404 Media said the company, Curator Live, has not responded to his request to fix the issue.The exposure, which also includes phone numbers, highlights how we can face data collection even at innocuous events like weddings. It\u2019s also not even the only recent exposure by a photo booth company. TechCrunch reported on a similar issue with a different company in December.\u201cEven if you just wanted the printed photo, your data is being held by a third party unbeknownst to you,\u201d the security researcher, who requested anonymity to speak about a sensitive security issue, said. \u201cThe fact that this third party leaks it freely is icing on the cake. It violates any reasonable expectation of privacy.\u201dIn all, the researcher says at least 100GB of photos are exposed. 404 Media reviewed a smaller sample of photos. They show people at various weddings and engagement parties cheering and drinking. Some photos include children. Others appear to have been taken at a NASA branded event.\u201cYou can attribute the phone numbers to photos of people in some cases. I think the greatest reasonable risk for photo booth users is that it could reveal intimate photos,\u201d the researcher added.Curator Live\u2019s website says the company \u201cdelivers industry-leading enterprise photo and video capture solutions. From photo booth operators to zoos, sports events, attractions, and vacation destinations, we help your brand create unforgettable experiences and lasting memories.\u201dAs for how they found this issue, the researcher said they went to a wedding where the DJ company had a Curator Live photo booth. \u201cThe booth was configured to take four or so photos, then printed them out. The machine promoted the user for a phone number to receive digital copies of the photos,\u201d he said.After reluctantly entering his number, the researcher received a text with a link to Curator Live\u2019s API, he said. From there, he found the exposed data. The company is still exposing people\u2019s data so 404 Media is not explaining the security issue in detail. But the impact is that a stranger could dig through other peoples\u2019 photos.The researcher shared a copy of his email he sent to Curator Live in November detailing the issue. The researcher said he never received a response. \u201cFix your shit,\u201d one line read.Curator Live did not respond to 404 Media\u2019s request for comment. <\/p>\n","protected":false},"excerpt":{"rendered":"