A significant data breach has been reported by cybersecurity researchers at financial technology firm Miio, offering mobile telecoms and financial services in Mexico. Approximately 2.9 million Know Your Customer (KYC) files were exposed in the leak, with documents dating back to 2017. The unguarded files included sensitive information like passports, IDs, driver’s licenses, and customer photos. While there’s no current evidence of malicious access, the potential for identity theft is high.
The leak, detected on September 12, 2024, remains unaddressed by Miio, raising concerns about customer data security. The disclosure notice was issued on October 2 after the files were exposed for at least three months. Researchers stress the risk of attackers exploiting the stolen data to open fraudulent accounts, apply for loans, or access credit cards in the victims’ names, urging affected individuals to stay vigilant.
Given Miio’s broad customer base, the breach poses severe financial and personal risks, potentially eroding trust in the company’s data protection measures. In response to the ongoing threat, users are cautioned to remain alert in safeguarding against possible fraudulent activities.