Australian real estate platforms used to upload and store rental documents are leaving personal information exposed online, according to a digital researcher.
An analysis of seven rental platforms, provided to Guardian Australia by an anonymous researcher, found millions of lease documents could be accessed through publicly available hyperlinks.
Real estate agents routinely manage sensitive tenant and landlord data, including lease agreements, identification documents, payslips and personal references. These files are commonly stored in cloud-based systems and shared via links.
The researcher found the hyperlinks could be scanned by automated web crawlers and cached, potentially allowing unauthorised access by threat actors.
The findings raise concerns about data security practices within Australia’s property rental sector and the protection of renters’ and landlords’ personal information.
