An ID verification service that works with TikTok, Uber, and X has exposed sensitive user data, including drivers' licenses and other private information. The breach, reported by 404 Media, was discovered by a researcher who found that the company had been storing and exposing user data. The company, which verifies identities by processing photographs of faces and drivers' licenses, had administrative credentials hacked and exposed online for more than a year.
The thing about identity verification, biometrics, facial recognition etc is that the people trusted to collect it often have terrible opsec. https://t.co/SgjKI1g4F8
A company that verifies the identities of TikTok, Uber, and X users, sometimes by processing photographs of their faces and pictures of their drivers’ licenses, exposed a set of administrative credentials online for more than a year: https://t.co/SXybWUiK13
$UBER $PYPL $COIN $UPWK New from 404 Media: the ID verification service for TikTok, Uber, X, and many more tech companies exposed real peoples' driver licenses. As we move towards an internet forcing us to verify our identities, shows these companies will absolutely be targeted…