Driving licences and other official documents leaked by authentication service used by Uber, TikTok, X, and more

AU10TIX, an identity verification provider used by major brands (Uber, TikTok, X, Coinbase, etc.), left administrative credentials exposed for more than a year, which granted access to a logging platform containing sensitive PII — including names, dates of birth, ID numbers, nationalities, and images of identity documents. A researcher provided screenshots and data showing the exposure; investigators believe the credentials were likely stolen by an infostealer from a NOC manager's computer. AU10TIX stated it no longer uses the affected system and has found no evidence the data was exploited, though the incident carries significant risk due to the sensitivity and potential scale of the exposed identity data.