Duales
Disclosed Apr 2, 20265 months agoUnverified
Money transfer app Duc left 360,000 ID and selfie files on open server
Toronto-based money transfer app Duc stored over 360,000 files, including driver's licenses, passports, verification selfies and transaction details, on a publicly accessible Amazon server dating back to 2020. Files were locked down after TechCrunch alerted the company, and Canada's privacy commissioner opened an inquiry.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Apr 2, 2026 |
| Attack | Exposed data |
| Data exposed | Government IDs, Biometrics, Names, Addresses, Financial |
| Sector | Finance · CA |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
| Source | |
|---|---|
| Canadian money transfer app Duc exposed driver's licenses and passports on Amazon servertechcrunch.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Apr 2 |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.