User ID Verification Service for TikTok, Uber, X Exposes Admin Credentials

AU10TIX, an identity verification provider used by major platforms, inadvertently exposed administrative credentials for more than a year that provided access to a logging platform containing names, dates of birth, nationalities, ID numbers, and document images used for identity verification. Timestamps and third-party reporting indicate the credentials were collected by malware in December 2022 and posted to a Telegram channel in March 2023; AU10TIX says the system has been decommissioned and there is no evidence of exploitation, but the exposure risks identity theft and highlights weak security practices around sensitive verification data.