You uploaded your passport to verify your TikTok account. Your passport photo ended up on an unsecured Au10tix server — exposed for over a year. Au10tix verifies identity for Uber, TikTok, X, LinkedIn, and Coinbase. One company, one unsecured server, millions of passports. You gave your ID to TikTok. A company you never heard of left it on the internet. An Israeli security company processes your passport photo when you verify identity on Uber or TikTok. Your biometric data — facial geometry, document scan, liveness video — processed under Israeli law. You verified on an American app. Your face went to Tel Aviv. The app store didn't mention Israel. Au10tix didn't mention the unsecured server.
What they claim: Au10tix describes enterprise-grade security for identity document processing
What we found: Au10tix is an Israeli company, founded as a subsidiary of ICTS International — a company with roots in Israeli airport security. The company processes biometric data including facial geometry, document photos, and liveness detection for identity verification. When Au10tix verifies your identity for Uber or TikTok, your biometric data is processed by an Israeli security company under Israeli data protection law — regardless of where you live.
What they claim: Au10tix promotes itself as a trusted identity verification provider used by major tech platforms
What we found: In 2024, 404 Media discovered that Au10tix had left identity verification credentials on an unsecured server since December 2022 — over a year. The exposed credentials could access identity documents (passports, driving licences, selfies) submitted by users of Uber, TikTok, X (Twitter), LinkedIn, Coinbase, and other platforms that use Au10tix for verification. You verified your identity on TikTok. Your passport photo sat on Au10tix's unsecured server.