Researchers discovered an unprotected database linked to IDMerit, a global identity verification company, exposing roughly 1 billion sensitive records across 26 countries. The breach included full names, addresses, dates of birth, national ID numbers, and phone numbers, creating a goldmine for criminals. In the United States alone, over 203 million records were compromised, affecting individuals in Mexico, the Philippines, Germany, Italy, and France.

The unsecured MongoDB database was secured within 24 hours after researchers notified IDMerit, but automated bots could have copied the data in minutes. This incident underscores the critical importance of robust data security in identity verification systems used by banks, fintech firms, and financial services companies.