Whenever an identity verification is performed, a duplicate of your passport remains stored on a third party's server. A fundamental issue with biometric information is that you cannot reset your face once it is compromised. Past events clearly illustrate these risks. During the 2020 Ledger leak, the home addresses of about 270,000 buyers were exposed to the public. Additionally, Revolut delivered customers' selfies and passports to an unauthorized party following a fraudulent government request in September.

Sources: Ledger 2020 customer data leak; Revolut disclosure, TechCrunch 12 Sep 2026 and BleepingComputer

#databreach