Money transfer app Duc exposed thousands of driver’s licenses and passports to the open web

An exposed Amazon-hosted server allowed anyone to access reams of customer data without needing a password.

Early report Major update Updated Apr 2, 2026, 4:29 PM UTC

Track this event Edit in app More event pages

What changed

TechCrunch: Money transfer app Duc exposed thousands of driver’s licenses and passports to the open web.

First seen Apr 2, 2026, 4:29 PM UTC Latest source Apr 2, 2026, 4:29 PM UTC

Update 1 1h ago

TechCrunch •published Apr 2, 2026, 4:29 PM UTC •fetched Apr 2, 2026, 4:30 PM UTC