When you purchase through links on our site, we may earn an affiliate commission.Heres how it works.
The data was hosted on Azure and contained 600,000 front and back images of various identity documents.
Furthermore, it contained roughly 200,000 selfies.
Some companies require users to take a selfie holding a document, as proof of ownership and identity.
Full audit
Gift cards are often abused in online scams.
Unfortunately, the company kept that data unprotected, for an undisclosed amount of time.
We dont know if any threat actors discovered it beforehand, but it is a possibility.
JayeLTee said they reached out to MyGiftCardSupply to no avail, after which they contactedTechCrunch.
Going forward, we are going to delete the files promptly after doing the identity verification.
The company says it locked down the database on January 1, 2025.
