“CBP did not adequately safeguard sensitive data on an unencrypted device used during its facial recognition technology pilot,” the report found. “This incident may damage the public’s trust in the Government’s ability to safeguard biometric data and may result in travelers’ reluctance to permit DHS to capture and use their biometrics at U.S. ports of entry.” According to the new report, DHS’s biometric database “contains the biometric data repository of more than 250 million people and can process more than 300,000 biometric transactions per day. It is the largest biometric repository in the Federal Government, and DHS shares this repository with the Department of Justice and the Department of Defense.” “A subcontractor working on this effort, Perceptics, LLC, transferred copies of CBP’s biometric data, such as traveler images, to its own company network,” the report found. “The DHS OIG made several recommendations in its report that all boil down to ‘tighten up security and make sure this doesn’t happen again,'” the report adds.
Read more of this story at Slashdot.