An ID verification service for TikTok, Uber and X reportedly left its credentials open for a year

Shadowed hands on a digital background reaching for a login prompt.

Identity verification company AU10TIX kept a set of admin credentials exposed for more than a year, possibly allowing threat actors to steal its customers’ sensitive data.

AU10TIX verifies user identities on behalf of its clients, which include, among others, TikTok, X, and Uber, via selfie pictures and scans of people’s driver’s licenses.