How Duc App's Cloud Misconfiguration Left 360,000 Identity Documents Exposed

The incident exposes critical vulnerabilities in how fintech platforms secure sensitive identity verification data. Duc App's misconfigured AWS storage left 360,000 government-issued documents openly accessible through a simple URL without encryption or password protection, raising urgent questions about compliance standards and data security practices across the digital payment industry.