finance Duc App Exposed Passports and IDs on Unsecured Server
Canadian fintech Duc left sensitive customer data - including passports and driver’s licenses - publicly accessible on an unencrypted Amazon server for four years, exposing systemic security failures in identity verification.
