- IDMerit maintained an unsecured database of over three billion records
- Experts find the database and manage to lock it
- Personal information exposed, but affected users may be few
Experts revealed that IDMerit, a provider of AI-powered digital identity verification solutions, kept a huge database full of sensitive customer information, unlocked and easily accessible on the public internet.
In total, more than three billion records have been discovered by cybersecurity researchers around the world. Cybernews and finally locked.
The team said it found an open MongoDB database weighing more than a terabyte and including records such as full names, addresses, zip codes, dates of birth, national ID cards, phone numbers, gender, email addresses, telco metadata, breach status and social profile annotations.
Major breach
The size of the database does not mean that three billion people were exposed, since several records belong to a single person, but the scale of the leak remains quite massive.
Cybernews said about a billion likely contained sensitive data, while the other two are database logs that are “probably less sensitive.”
The database is also global, as the data of individuals from 26 countries was exposed, with the United States being the most affected (over 203 million records). Mexico (124 million) and the Philippines (72 million) complete the top three, while Germany, Italy and France make notable appearances, with records of 61m and 53m disclosed respectively.
“At this scale, downstream risks include account takeovers, targeted phishing, credit fraud, SIM swaps and long-term privacy breaches. At an industry level, the case highlights the extent to which third-party identity providers have become critical infrastructure and can become single points of catastrophic failure.” Cybernews said.
Headquartered in California, IDMerit is a global identity verification and fraud prevention technology company that provides API-based solutions for KYC, AML and digital identity verification.
As of 2025, it has approximately 25 to 50 employees and serves a growing global customer base, generating approximately $2.9 million in annual revenue. The company was founded in 2014 and operates as a privately held American technology provider.
The best antivirus for every budget
Follow TechRadar on Google News And add us as your favorite source to get our news, reviews and expert opinions in your feeds. Make sure to click the Follow button!
And of course you can too follow TechRadar on TikTok for news, reviews, unboxings in video form and receive regular updates from us on WhatsApp Also.
