TLDR Tech / InfoSec
Money transfer app Duc exposed thousands of driver's licenses and passports to the open web
Toronto-based Duales left an Amazon S3 bucket for the money transfer app Duc publicly accessible, no password required, exposing over 360,000 files, including driver's licenses, passports, selfies, names, addresses, and transaction records dating back to September 2020. Duales CEO Henry Martinez González confirmed it's fixed, but won't say whether access logs exist, and now Canada's privacy regulator is investigating.
Read the full story