March 11, 2026

A massive unprotected database linked to IDMerit, a company providing AI-driven identity verification services to financial firms, exposed nearly 1 billion records across 26 countries, including over 203 million in the U.S. This unsecured MongoDB database contained highly sensitive personal data such as full names, addresses, dates of birth, Social Security numbers, and other details critical for identity confirmation, potentially enabling criminals to commit identity theft or fraud if accessed. Researchers from Cybernews discovered the breach on November 11, 2025, highlighting the severe risk and urging caution around extortion scams claiming stolen data.

Leave a Reply