LENEXA, Kan. (KCTV) – Residential gate codes and emergency access codes for fewer than 35 properties in Lenexa were publicly accessible online for an unknown period before the city removed them within 20 minutes of being contacted by KCTV5.
A local Geographic Information System (GIS) and security researcher discovered the exposed data in late January while browsing the city’s public mapping server and sent three emails over four months trying to alert officials. He received no response until the station intervened.
“I noticed there was a layer called entry codes. And I was like, that’s a little strange. Like, why is that something that’s public?” said the researcher, who asked to be identified only as John for privacy reasons…