Canadian money transfer app Duc exposed thousands of driver's licenses and passports through an unsecured Amazon server. The security lapse allowed anyone to access sensitive customer data without authentication. This represents a significant privacy breach affecting financial service users.
Background
Cloud misconfigurations are a common cause of data breaches, particularly when sensitive documents are stored without proper access controls. Financial apps handling identity verification documents have heightened security responsibilities.
- Source
- TechCrunch
- Published
- Apr 3, 2026 at 12:29 AM
- Score
- 7.0 / 10