Massive IDMerit Database Exposure Leaves 1 Billion Records Unsecured Cybernews researchers recently uncovered a publicly accessible database containing nearly 1 billion records from 26 countries, linked to IDMerit, an AI-powered digital identity verification provider serving fintech and financial services. The unsecured data was discovered on November 11, 2025, and promptly reported to the company, which secured the database shortly after. There is currently no evidence that threat actors accessed the information. The exposed records included highly sensitive personally identifiable information (PII), such as: - Full names - Home addresses and postal codes - Dates of birth - National identification numbers - Phone numbers and email addresses - Gender details - Potential telecom metadata The structured nature of the data makes it particularly vulnerable to abuse, as it can be easily searched and exploited. ### Breakdown of Exposed Records by Country The dataset spanned multiple regions, with the highest concentrations in: - United States: ~204 million - Mexico: ~123 million - Philippines: ~72 million - Germany: ~60 million - Italy: ~53 million - France: ~52 million - Turkey: ~49 million - Brazil: ~39 million - Spain: ~31 million - Malaysia: ~24 million Smaller but still significant exposures were recorded in countries like Canada (~12 million), Australia (~12 million), and China (~8 million). ### Potential Risks of the Exposure The leaked data is a prime target for cybercriminals, enabling: - Identity theft - Account takeovers - Targeted phishing attacks - Credit and loan fraud - SIM-swapping attacks Unlike passwords, which can be reset, identity-related data remains valuable indefinitely, potentially circulating in underground markets long after the initial exposure. The incident underscores the risks of improperly secured databases, particularly for companies handling sensitive verification data. While IDMerit acted quickly to contain the breach, the long-term implications for affected individuals remain a concern.