Tech

A WeWork tenant found its weak WiFi security exposed bank details, driving licenses, and a virtual birthday card featuring Nicholas Cage as a cat

Adam Neumann wework we company ceo
Adam Neumann, CEO of The We Company. Jackal Pan via Reuters
Read in app

WeWork's WiFi security is so shoddy that it has been exposing tenants' sensitive data for years, a new report from CNET shows.

CNET spoke to Teemu Airamo, who started working in a WeWork office in 2015 with his digital media company.

Airamo wanted to check how secure WeWork's WiFi was, and found immediately that he was able to view hundreds of sensitive documents belonging to other companies in the building. Airamo alerted WeWork's community manager to the problem, only to find they already knew about it.

"The first initial community manager in 2015 completely denied flat out that this was a problem," Airamo told CNET.

Airamo has remained in the building for four years and routinely runs WiFi scans to see if WeWork's network has improved. According to CNET, he has been able to view scans of people's driver's licenses, passports, private emails, bank account usernames and passwords, and even health records. Less sensitive data was also visible to Airamo, including a birthday card containing an image of Nicolas Cage's face superimposed onto a cat.

Read more: The history of WeWork's meteoric valuation rise — and fall

WeWork's weak WiFi was first exposed in a Fast Company report from August, which pointed out that many WeWork locations share the same easily-guessable passwords. WeWork said in the Fast Company piece that it was planning to roll out a new layer of security technology called 802.1x — which would verify users' identity — in the first quarter of 2020.

CNET's report comes at a delicate time for WeWork, as its highly publicized IPO has reportedly been delayed. In its S-1 paperwork, WeWork said that it has 527,000 members, i.e. businesses and freelancers that use its offices.

"WeWork takes the security and privacy of our members seriously and we are committed to protecting our members from digital and physical threats," a WeWork spokeswoman told Business Insider in a statement.

"In addition to our standard WeWork network, we offer members the option to elect various enhanced security features, such as a private VLAN, a private SSID, or a dedicated end-to-end physical network stack," she added.

As noted by CNET, these additional security measures don't come included in a WeWork membership. The private VLAN costs $95 per month with a $250 set-up fee while a private office network costs $195 a month, according to WeWork's website.

Read next

Isobel (she/her) was a senior tech reporter at Business Insider. She was particularly interested in Big Tech, privacy, and worker's rights. You can read some of her previous work here: The quest to find $181 million in bitcoin buried in a dump Exclusive: Amazon targeted military spouses in a pandemic recruitment drive. 2 of them say they ended up being paid 33% less than non-military coworkers. Exclusive: Amazon plans a pay cut of up to 23% for hourly workers who guide trucks in and out of its UK delivery stations Exclusive: Tesla's solar division asks employees to scour social media for complaints about both the company and Elon Musk, trying to get customers to delete their posts, former employees say A couple says their Tesla Solar panels caused relentless leaks that led to mold 10 times the healthy limit, $115,000 in damages, and a long-running legal battle Ghosted by Tesla: Customers say Tesla's ultrasleek, expensive Solar Roofs and panels come with nightmare customer service, often leaving them with unanswered calls and emails for months on end Amazon workers leading a historic push for unionization in Alabama describe midnight 'education' meetings, an unexpected mailbox, and streams of anti-union flyers as they go up against one of the world's most powerful companies 'It's a slap in the face': Amazon is handing out 'Thank you' t-shirts to warehouse workers as it cuts their hazard pay Investigation: Amazon warehouse employees speak out about the 'brutal' reality of working during the holidays, when 60-hour weeks are mandatory and ambulance calls are common The science behind Elon Musk's brain-chip company Neuralink Investigation: Instagram's new TV service recommended videos of potential child abuse