Au10tix 2024 Credential Exposure: Identity Documents From TikTok, X, and Uber Users

Au10tix provides identity verification to major platforms. 404 Media reported that admin credentials were left exposed for over a year, potentially granting access to identity documents from users of TikTok, X, Uber, LinkedIn, and other platforms.

The breach at Au10tix exposed Potentially millions of identity documents records through admin credentials left exposed on the internet for over a year. Users who verified identity on TikTok, X, Uber, LinkedIn, and other Au10tix clients The incident highlights the ongoing challenges organizations face in protecting sensitive user data against increasingly sophisticated attack vectors. Security researchers have noted that breaches of this magnitude often result from a combination of technical vulnerabilities and organizational failures in security practices.

Current status: Credentials rotated; scope of unauthorized access unknown. Affected users should take immediate steps to protect their accounts, including changing passwords, enabling multi-factor authentication, and monitoring financial accounts for unauthorized activity. Filing a DSAR with Au10tix can help you understand what data was exposed and request its deletion.