Archive ready

Money transfer app Duc exposed thousands of driver's licenses and passports to the open web | TechCrunch

https://techcrunch.com/2026/04/02/canadian-money-transfer-app-duc-expose-drivers-licenses-passports-amazon-server/

April 3, 2026 at 01:31 AM JST•The archive page, viewer, and downloads use this saved version.

April 3, 2026 at 01:31 AM JST·techcrunch.com

The evidence pack includes HTML, screenshots, summaries, and metadata. It can be downloaded on Pro.

Saved page

Money transfer app Duc exposed thousands of driver's licenses and passports to the open web | TechCrunch

Open the archived HTML with saved-time metadata attached.

Original URLhttps://techcrunch.com/2026/04/02/canadian-money-transfer-app-duc-expose-drivers-licenses-passports-amazon-server/

StartedApril 3, 2026 at 01:31 AM JST

This HTML has CSS and images embedded, so it can still be opened even if the original page disappears.

About this pageAI generated

This page reports on a security breach involving Duc, a Canadian money transfer app, which exposed hundreds of thousands of personal documents on an unencrypted Amazon server accessible without password protection. Driver's licenses, passports, and other personal information could be viewed and downloaded by anyone with the server's easily guessable web address. Security researcher Anurag Sen discovered the vulnerability and contacted TechCrunch to alert the company. Toronto-based Duales, which operates Duc App, resolved the exposure after being notified, with the Amazon server containing over 360,000 files.

Screenshot

The full page can be captured up to 15,000px in height so you can review the complete page layout when needed.