IDMerit

Profile narrative

IDMerit provides identity verification solutions that enable businesses to confirm the authenticity of personal information. The company serves clients across multiple industries that require validation of names, addresses, dates of birth, government identifiers, contact details and demographic attributes. Its offerings are designed for use in both domestic and international contexts, with a notable presence in the United States. In addition to the U.S. market, IDMerit’s services extend to twenty‑five other countries, supporting cross‑border verification needs.

In November 2025 a security review revealed that an IDMerit‑hosted MongoDB database containing roughly one billion identity records was left unprotected. The exposed dataset included names, addresses, dates of birth, national identification numbers, phone numbers, email addresses and gender information. Over two hundred three million of the records pertained to individuals residing in the United States, reflecting the company’s concentration of U.S.‑based data. After being alerted by independent researchers, IDMerit secured the system the following day. The firm stated that it does not retain customer data and noted that its partners confirmed no breach occurred in their own systems.

The incident underscores IDMerit’s specialization in managing large volumes of identity verification data. Its operational model emphasizes verification without long‑term storage, a point the company cites to distinguish its service from platforms that aggregate personal information. Headquartered in the United States, IDMerit operates under data‑protection regulations that govern the handling of personal information while facilitating international checks. The rapid response to secure the exposed database illustrates the firm’s capacity to act swiftly when vulnerabilities are identified.

Incidents

1 incident linked to this organisation.