Teletext Holidays a) exists and b) left 200k customer call recordings exposed in S3 bucket

Teletext Holidays a) exists and b) left 200k customer call recordings exposed in S3 bucket

Get your grandparents to book with someone else


Teletext Holidays managed to leave more than 200,000 customer phone call recordings exposed on an unsecured AWS server, according to reports.


A total of 532,000 files were exposed on AWS servers belonging to Truly Travel, the company that trades as Teletext Holidays, of which 212,000 were recordings of live news.


Verdict, the news site that first reported the breach, said the calls were recorded between April and August 2016. They involved Britons ringing up Teletext Holidays to make bookings, change them, complain and do all the other things people do when they phone a company with which they have a booked service.


"In conversations where a holiday is booked, customers also tell the Teletext Holidays employees partial card details. This includes the type of card, name on card and expiry date," reported the teletext holidays exists customer recordings exposed bucket