From the Highlights: "U.S. Customs and Border Protection (CBP) is responsible for securing travelers' data from cybersecurity threats. CBP's Mobile Passport Control (MPC) applications (app) -- used by more than 10 million travelers from July 2017 through December 2019 -- contained the travelers' personally identifiable information (PII) used to expedite them through CBP's inspection process. Our audit objective was to determine to what extent CBP protects its MPC apps from cybersecurity threats. [...] We made eight recommendations to improve the security of CBP's MPC program."
Department of Homeland Security, Office of Inspector General, Report No. OIG-21-47
Department of Homeland Security Office of Inspector General: https://www.oig.dhs.gov/