A second app from the same developer, IDMerit — focused on identity verification — compounded the risk by exposing KYC-related data from users in at least 25 countries, ...