Money transfer app Duc exposed thousands of driver’s licenses and passports to the open web April 2, 2026 by kamal An exposed Amazon-hosted server allowed anyone to access reams of customer data without needing a password.