IDMerit breach exposes ~1B personal records across 26 countries, reigniting KYC debate
AccBalanced · x · 2026-09-05
An unsecured database belonging to IDMerit, an ID/age verification service, exposed roughly 1 billion personal records across 26 countries — names, addresses, national IDs, dates of birth, phones and emails.
The irony hasn't been lost on observers: the companies trusted to verify identities are themselves leaking at massive scale, prompting calls to rethink how KYC and digital ID systems are designed.
More from Safety
- India needs an "AI defence force": experts warn of agent swarms and AI worms — ravi_iitm · 2026-10-23
- DeepSeek US ban covers self-hosted weights, not just the app — AIFlow_ML · 2026-10-23
- Uncensored fine-tunes vanish from Hugging Face amid unexplained takedowns — umarmnaq · 2026-10-23
- Gmail's AI scans your emails and attachments by default; here's how to turn it off — alifcoder · 2026-10-23
- Typosquatted Blender MCP Repo Hit 958 Stars in Days and Silently Ran Malware — Promptmethus · 2026-10-23
- Prompt injection scanners should be positional, not phrasal: same string, different blast radius — mrpkk · 2026-10-23