An ID verification service that works with TikTok and X left its credentials wide open for a year. This means that hackers could potentially have accessed sensitive data, like drivers’ licenses.

An ID verification company that works on behalf of TikTok, X and Uber, among others, has left a set of administrative credentials exposed for more than a year, as reported by 404 Media.

The Israel-based AU10TIX verifies the identity of users by using pictures of their faces and drivers’ licenses, potentially opening up both to hackers.