88 ID Verification Breaches Show the Cost of Collecting Identity Data
A report catalogs 88 ID-verification breaches since 2011 exposing at least 2.15 billion records, with 41 incidents leaking irreplaceable biometric data and documents.
A Mysterium VPN report compiles 88 documented breaches since 2011 involving identity and age-verification data, with confirmed exposure of 2.15 billion records and claimed totals of 4.54 billion. In 41 of 88 incidents, ID scans, verification selfies, fingerprints, and biometric templates leaked, data that cannot be changed after exposure. Notable cases include the Tea app's exposed selfies, Discord's ~70,000 government IDs, vendor failures at AU10TIX, Sumsub, and Persona, and national registry breaches in Argentina (45 million records) and France (11.7 million people).
- 88 incidents since 2011 exposed at least 2.15 billion confirmed records, with claimed totals of 4.54 billion.
- 41 of 88 incidents leaked source documents such as ID scans, selfies, fingerprints, and biometric templates.
- 42% of the incidents (37) occurred between January 2024 and August 2026 as mandatory age checks spread.
- Vendors AU10TIX, Sumsub, and Persona all suffered incidents affecting users of TikTok, Uber, X, Discord, and Roblox.
- Government registries were also hit, including Argentina's 45-million-record leak and France's ANTS breach affecting 11.7 million people.
- Organizations
- ANTS
From the original article
3 min read at securityaffairs.com
88 ID-verification breaches exposed billions of records, highlighting the growing risks of collecting sensitive identity and biometric data. A new report from Mysterium VPN compiles 88 documented incidents since 2011 where data collected specifically to verify someone’s identity or age got breached, exposed, or sold. The confirmed and researcher-verified total sits at 2.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.