Gift Card Site Leaks Hundreds of Thousands of Identity Documents

A US online gift card store, MyGiftCardSupply, suffered a massive security breach exposing hundreds of thousands of customer identity documents. Security researcher JayeLTee discovered an unsecured server containing over 600,000 images of driver's licenses, passports, and selfies from around 200,000 customers. MyGiftCardSupply claimed the data was collected for anti-money laundering compliance ('know your customer' checks), but its founder admitted the security lapse, stating the data is now secured. However, the company hasn't disclosed the duration of the exposure or plans to notify affected users. This incident highlights the ongoing risks associated with KYC procedures and data breaches.