ALERT: Never forget folks, with this info and current AI – they can call your bank in your voice and having all of your info, and steal it completely.
The information was made public on February 18, 2026: 1 BILLION personal data records have been exposed to the world by IDMerit, a company specializing in AI-based identity verification. The very AI that was supposed to secure these identity checks is the cause of the largest personal data leak in recent history. One-eighth of humanity potentially compromised!! – Full names – Postal addresses – Dates of birth – Phone numbers – Emails And above all: – Passport copies – ID cards and official documents from 26 countries United States (204 million) Mexico (123 M) Philippines (72 M) Germany (60 M) France (52 million people)… These ultra-sensitive records came from mandatory KYC processes of banks, fintech companies, insurance firms, and telecom operators around the world.
On November 11, 2025, researchers discovered an entire MongoDB database (over 1 terabyte) completely open on the internet — no password, no encryption! A catastrophic configuration error. The vulnerability was patched the same day… but it is almost certain that cybercriminals have already massively scraped it. A massive risk of identity theft, sophisticated banking fraud, ultra-targeted phishing, and identity usurpation on a global scale. The irony is chilling: the company that was supposed to secure our identities with AI is itself responsible for the largest exposure of personal data in years!! This is far more than just a leak. It’s a digital earthquake in an era where everything is becoming digital and where governments demand our personal information on extremely poorly secured platforms
- Kinda like TransUnion selling your info to a company that gets hacked and THEIR solution is for you to get TRANSUNION. identity theft monitoring service. It should be against the law for these credit agencies to sell your information.
- Long time Mongodb engineer here… the database has always been a security risk. By default no authentication, authorization, or TLS encryption is enabled. They market themselves as simple to use so DBAs aren’t needed; management by developers only. This is a deadly combination. IDMerit clearly fell for the sales pitch. LIkely they used AI to build systems instead of hiring seasoned developers and DBAs. Mongodb also has extremely discriminatory, blatant DEI hiring policies which lead to poor design and implementation. – Sunny Jim
Thread at X
ALERT: Never forget folks, with this info
