In 2022, administrative credentials associated with AU10TIX were reported to have been exposed online. According to the supplied account, the credentials could potentially have enabled access to personal data submitted for identity verification, including names, dates of birth, nationalities, identification numbers, and the types of documents uploaded. AU10TIX provides automated identity checks for businesses including Airbnb, PayPal, LinkedIn, Fiverr, and X, making the alleged exposure significant because the platform processes highly sensitive identity records at scale.
The company reportedly did not become aware of the incident until 2024. In a statement released in 2025, AU10TIX said an internal review found no evidence that data had been exposed or that customers had been affected; the supplied source does not identify an independent forensic investigation, regulator finding, confirmed victim count, or enforcement action. The incident therefore remains a reported security failure rather than a proven mass disclosure. It highlights the accountability problem created when private identity vendors centralize government-document data while retaining control over breach detection and public disclosure.
