Technology
1 billion identity records exposed in ID verification data leak
NEWYou can now listen to Fox News articles!
Things like your name, home address, date of birth and even your Social Security number may have been sitting on the open internet. Researchers say an unprotected database tied to IDMerit, a company that claims to help businesses verify identities, exposed roughly 1 billion sensitive records across 26 countries.
In the United States alone, more than 203 million records were left unsecured. This involves the exact documents and details companies use to confirm you are really you. If criminals get that kind of information, they’d have everything they need.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
BE AWARE OF EXTORTION SCAM EMAILS CLAIMING YOUR DATA IS STOLEN
Researchers say an exposed database tied to IDMerit left roughly 1 billion sensitive identity records visible on the open internet. (Morteza Nikoubazl/NurPhoto via Getty Images)
What you need to know about the massive data leak
Researchers at Cybernews, a cybersecurity news and research publication, discovered an exposed MongoDB database on Nov. 11, 2025, that they believe belongs to IDMerit, a global identity verification provider that serves banks, fintech firms and other financial services companies. IDMerit uses artificial intelligence tools to help businesses perform KYC, short for Know Your Customer, which is the identity verification process required when you open financial accounts.
The database was not protected by a password. Anyone who knew where to look could access it. Inside were full names, home addresses, postal codes, dates of birth, national ID numbers, phone numbers, email addresses and gender information. Some records also included telecom-related metadata and internal flags that may have referenced past breaches.
The exposure affected people in 26 countries. The United States had the highest number of exposed records at more than 203 million. Mexico, the Philippines, Germany, Italy and France were also heavily impacted.
Researchers notified the company, and the database was secured the following day. There is currently no public evidence that criminals downloaded the data. Still, it’s worth noting that automated bots constantly scan the internet for exposed databases and can copy them within minutes.
YOU COULD BE SHARING YOUR SOCIAL SECURITY NUMBER WHEN YOU DON’T NEED TO
The unsecured database reportedly contained highly sensitive details including names, home addresses, dates of birth and national ID numbers. (Silas Stein/picture alliance via Getty Images)
How it happened and why it matters for you
When you open a bank account, sign up for a crypto platform or verify your identity for a financial app, you are often asked to upload a government ID and provide personal details. Companies like IDMerit process that information behind the scenes. That means this database likely contained the same details you would use to prove your identity to a bank or government agency.
For criminals, that is gold. With your full name, date of birth, national ID and phone number, scammers can attempt SIM-swap attacks. This is when someone convinces your mobile carrier to transfer your phone number to their device. Once they control your number, they can intercept security codes sent by text message and break into your bank or email accounts. They can also launch highly targeted phishing scams. Imagine receiving a call or email that includes your real home address and ID number. It would feel legitimate, and that’s exactly the point.
Because the data was neatly organized, criminals could sort it by country or other details and use automated tools to target huge numbers of people with scams.
We reached out to IDMerit for comment, but did not hear back before our deadline.
FIGURE DATA BREACH EXPOSES NEARLY 1M ACCOUNTS
Experts warn that data like this can help criminals launch SIM swap attacks and highly targeted phishing scams. (Kurt “CyberGuy” Knutsson)
8 ways you can protect yourself from data leaks
Before criminals have a chance to use this information against you, here are practical steps you can take right now to lock things down and reduce your risk.
1) Freeze your credit reports
Contact the major credit bureaus in your country and place a credit freeze. This prevents criminals from opening loans or credit cards in your name. Even if someone has your national ID and date of birth, lenders will not be able to access your credit file without your permission.
2) Stop relying on text message security codes
If your bank or email account still uses SMS codes for two-factor authentication, switch to an authenticator app instead. Text messages can be intercepted during SIM-swap attacks. An authenticator app generates codes directly on your device, making it much harder for criminals to break in.
3) Use a password manager
If attackers pair leaked identity data with passwords from older breaches, they can try to access your accounts. A password manager creates strong, unique passwords for every account, so one leak does not unlock everything else.
Check out the best expert-reviewed password managers of 2026 at Cyberguy.com.
4) Consider identity theft protection
Identity theft monitoring services can alert you if your personal information is used to open accounts or appears on dark web marketplaces. Early detection can mean the difference between stopping fraud quickly and discovering it months later. See my tips and best picks on Best Identity Theft Protection at Cyberguy.com
5) Watch your mobile account closely
Log in to your mobile carrier account and enable extra security features, such as a port-out PIN if available. This adds an additional layer of protection so someone cannot easily move your phone number to another SIM card.
6) Run antivirus software on your devices
Good antivirus software can block malicious links, fake login pages and spyware that may be used in follow-up attacks. After a large data exposure, phishing campaigns often spike, and having protection in place can stop you from clicking into trouble. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.
7) Consider a personal data removal service
Your personal information is often scattered across data broker sites and people-search databases that sell access to your details. A personal data removal service can monitor where your information appears online and work to get it taken down. This reduces the amount of data criminals can find about you in one place, making it harder for them to piece together your identity and target you with scams or fraud. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.
8) Be skeptical of calls that know too much
If someone contacts you and references your address, date of birth or ID number, do not assume they are legitimate. Hang up and call the official number listed on the company’s website. Criminals use real data to make fake stories sound convincing.
Kurt’s key takeaway
This incident exposes a larger problem. Companies that handle identity verification have become critical infrastructure for the digital economy. When one of them leaves a database open, the fallout spreads across countries and millions of ordinary people who never even heard of the company. You trusted a bank or app with your ID. That bank trusted a third party. Somewhere in that chain, basic security controls failed.
Should companies that handle identity verification face automatic penalties when they expose millions of people’s most sensitive data? Let us know by writing to us at Cyberguy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
Copyright 2026 CyberGuy.com. All rights reserved.
Technology
Nothing cancels this year’s CMF phone due to RAM prices
Nothing’s next budget phone is the latest victim of RAMageddon. As 9to5Google reports, Nothing co-founder Akis Evangelidis announced in a post on X that a follow-up to the CMF Phone 2 Pro won’t be coming this year:
We were working on a successor but with memory prices where they are right now, we can’t build a phone that feels like a genuine step forward at a price that makes sense for CMF. As a result, we’ve decided not to launch a new CMF phone this year.
Last week, Nothing CEO and co-founder Carl Pei also said the RAM shortage has impacted the cost of the company’s mid-range phone, stating, “For Phone 4A, memory costs doubled between when we decided to build the device and when it launched. They’ve doubled again since.” According to Pei, “memory is now the most expensive component in a smartphone.” Nothing is far from the only company facing RAM pricing challenges — earlier this week, Tim Cook announced Apple will be raising prices, saying “the situation has become unsustainable.”
While there won’t be a new CMF phone this year, Evangelidis added in his post that CMF still has “several new products launching as well as some entirely new categories.” He also hinted that “the smartphone launch season at Nothing isn’t over yet.”
Technology
China’s brain chip breakthrough raises big questions
China approves world’s first commercial brain chip
Apple unveils new child safety tools, enabling parents to manage kid accounts, media access, communication, apps, and browsing. Tech companies like Meta, Roblox, YouTube and TikTok enhance safety with age verification, content moderation and time limits. China approves the world’s first commercial brain chip, raising privacy concerns.
NEWYou can now listen to Fox News articles!
A coin-sized brain chip in China could help people with paralysis control devices using their thoughts. China has approved a brain-computer interface called NEO for commercial medical use in certain patients with paralysis caused by spinal cord injuries. That moves brain-chip technology out of research trials and closer to real-world medical care.
Developed by researchers at Tsinghua University and Shanghai-based Neuracle Technology, NEO sits under the skull but rests on the brain’s protective outer layer rather than piercing deep into brain tissue. That design could make it less invasive than some competing implants.
For patients who have lost movement, this kind of technology could be life-changing. It could help restore a level of independence that once felt out of reach. But here’s where we need to slow down a bit. If a brain chip can turn your brain signals into digital commands, we need to ask who controls that data and how well it is protected.
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
BRAIN IMPLANT ENABLES ALS PATIENT TO COMMUNICATE USING AI
China’s NEO brain implant could help some paralysis patients control devices, like prosthetic hands, with their thoughts while raising concerns over brain data privacy. (Tsinghua University)
What is China’s NEO brain chip?
NEO is a brain-computer interface, often called a BCI. These systems read brain activity and translate it into commands for an external device. In this case, the implant uses sensors placed near the brain’s motor-control area. Those signals can help a patient operate equipment such as a robotic glove or computer interface.
What makes NEO especially notable is its placement. Brain-computer interfaces can be designed in different ways, and some go deeper into the brain than others. The company most people know in this space is Neuralink, the brain-chip startup co-founded by Elon Musk. Its implant uses tiny threads that enter the brain’s cortex. NEO takes a less invasive approach by placing electrodes on the dura mater, which is the protective membrane around the brain.
That design matters because every brain implant carries medical risk. Surgery can cause bleeding, swelling, infection or tissue damage. Even a small complication in the wrong part of the brain can affect speech or movement.
China’s approval does not mean brain chips are suddenly available for anyone who wants one. This remains a medical device for a narrow group of patients. Right now, the focus centers on helping people with severe paralysis regain some digital or assisted movement control.
Why China’s brain chip breakthrough matters
The medical upside here is hard to deny. More than three billion people worldwide live with neurological conditions, according to the World Health Organization. That includes people dealing with stroke, epilepsy, Parkinson’s disease, spinal cord injuries and other serious conditions.
For someone who has spent years unable to move freely or communicate easily, even a small amount of restored control could feel enormous. That is why brain-computer interfaces are getting so much attention. They could give some patients a new way to interact with the world around them.
Neuralink has already shown what that can look like in real life. Audrey Crews, a Neuralink trial participant who has been paralyzed for years, publicly shared that she wrote her name using the implant by controlling her computer.
ELON MUSK SHARES PLAN TO MASS-PRODUCE BRAIN IMPLANTS FOR PARALYSIS, NEUROLOGICAL DISEASE
How China’s brain chip compares with Neuralink
Elon Musk’s Neuralink has attracted most of the public attention in the U.S. brain-chip race. Musk has talked openly about restoring movement, helping people communicate and one day addressing vision loss.
Neuralink received approval to begin human trials, and more than 20 people have reportedly received its implant through testing. However, it has not received broad FDA approval for general commercial use.
China’s NEO approval puts a different kind of pressure on the field. It shows that China wants to move brain-computer interface technology into its health system and build a major industry around it.
This also fits a larger pattern. China has made BCI development part of its strategic technology push. The country wants breakthroughs by 2027 and a globally competitive brain-computer interface industry by 2030.
The coin-sized NEO brain chip rests on the brain’s protective outer layer, making it less invasive than implants that pierce brain tissue. (Tsinghua University)
Why brain chip privacy is such a big concern
We already worry about phones listening, apps tracking location and smart TVs collecting viewing habits. Brain-computer interfaces take that concern to another level.
A BCI collects signals from the nervous system. Today, that may mean decoding movement intent, such as whether a patient wants to move a cursor left or right. But as the technology improves, the data could become more sensitive.
That raises some big questions. Who owns the brain data? Can it be sold, shared or used to train AI systems? Could an insurer, employer or government ever demand access? What happens if a company changes its privacy policy after the implant becomes part of someone’s daily life?
Those questions sound dramatic until you remember how many connected devices began as conveniences and turned into data pipelines.
A brain chip designed for medical help should not become another ad platform, another surveillance tool or another database waiting to be breached.
YOUR HEALTH DATA IS BEING SOLD WITHOUT YOUR CONSENT
Could hackers target brain-computer interfaces?
This is where the whole brain-chip conversation gets very serious. Any device that connects to a computer raises security questions. A brain-computer interface raises even bigger ones because it deals with signals from your body and, in some cases, the devices that help you move or communicate.
The concern here is someone getting access to neural data, device settings or the commands moving between the implant and outside equipment. Think about that for a second. If a brain chip helps someone control a robotic hand, a wheelchair or a communication device, a security failure could affect far more than privacy. It could affect that person’s independence and safety. That to me is scary.
Companies building these devices need to treat cybersecurity like part of the surgery, not some software update they figure out later. Encryption, strict access controls, medical-grade testing and clear update policies should be baked in from day one.
And because a brain implant may stay inside a person’s body for years, long-term support has to be part of the deal. No one should end up with an outdated implant in their head because a company moved on to the next big product launch.
What China’s brain chip means to you
For now, this technology is geared toward patients with serious medical needs. So, no, most of us are not lining up for a brain chip anytime soon. But this should still get your attention.
We already give up a lot of personal data through our phones, watches, cars and smart home devices. A brain implant takes that to a whole different level because the data comes from inside the body. That is about as personal as it gets.
Before this technology moves beyond hospitals and medical trials, patients need plain answers before they agree to anything. They should know who can access the data, how long it gets stored, whether it can be shared and whether it can help train AI systems.
The medical potential here is incredible. Helping someone regain control or communicate again could change a life. But the privacy protections need to be just as strong as the technology itself.
NEURALINK BRAIN IMPLANT HELPS ARIZONA MAN REGAIN CONTROL OF HIS LIFE
Brain-computer interfaces, like Neuralink, pictured here, could restore independence for some patients, but experts say neural data needs strong privacy and cybersecurity protections. (Neuralink)
Watch the CyberGuy Live replay: Lock Down Your Phone in 30 Minutes
Your phone holds your email, passwords, photos, banking apps and personal data. In this free CyberGuy Live replay, Kurt the CyberGuy walks you step by step through simple phone security fixes you can do at your own pace. You’ll learn how to improve your privacy settings, spot the latest phone scams, use trusted security tools and walk away with a simple checklist to stay protected. Watch the replay and get our checklist here: CyberGuyLive.com
Kurt’s key takeaways
China’s NEO brain chip could be a huge step forward for people living with paralysis. If this technology helps someone regain control or communicate again, that is powerful. But I also think we need to be very careful here. Once a device connects your brain signals to outside technology, the privacy stakes change fast. We are talking about data tied to your nervous system. That to me is the line we need to watch closely. Brain chips could do incredible good. But companies and governments need clear limits before this technology moves any further into everyday life. The promise is real. So are the risks. And when the data comes from inside your own head, “trust us” will never be enough.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Would you ever consider a brain implant if it could restore movement or communication, or does the privacy risk feel too personal to accept? Let us know by writing to us at CyberGuy.com.
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
Technology
NASA selects Eric Schmidt’s rocket company for a 2028 mission to Mars
Relativity Space, the rocket company led by former Google executive Eric Schmidt, was picked to launch NASA’s Aeolus payload to Mars in 2028, as reported earlier by TechCrunch. Under a new public-private partnership, Relativity Space will provide the “spacecraft, rocket, and cruise operations” to fly Aeolus to Mars, where the payload will “provide the first integrated, daily, global view of Martian winds, temperatures, dust, and clouds.”
The Aeolus payload will have four instruments on board for studying the Martian atmosphere, which NASA says will “directly inform entry, descent, and landing systems and support safer, more predictable mission planning for astronauts.”
Schmidt, who served as CEO of Google from 2001 to 2011, became Relativity Space’s CEO in 2025, a couple of years after it launched the “world’s first 3D-printed rocket,” Terran 1, which failed shortly after launch. Relativity Space’s larger Terran R rocket isn’t scheduled to have its first launch until later this year.
-
Atlanta, GA5 minutes agoAtlanta Ballet Returns to the Fox Theatre to Present Cinderella for One Weekend Only This Fall
-
Minneapolis, MN8 minutes agoMERAUDER, JUDGE, ARKANGEL and many more announced for Minneapolis’ Snow and Flurry 2026
-
Indianapolis, IN13 minutes agoThird Public Safety Camera Added on Washington Street in Downtown Indy
-
Pittsburg, PA20 minutes agoAnalysis: Most Pittsburgh‑area communities are losing residents — here’s why that might be OK
-
Washington, D.C23 minutes agoTrump’s DC makeover frenzy bewilders locals and visitors: ‘It’s like we’re under occupation’
-
Augusta, GA23 minutes agoAugusta Regional Airport hosts drone camp for students
-
Cleveland, OH35 minutes agoCleveland police arrest suspect in involuntary manslaughter investigation, find fentanyl and PCP
-
Austin, TX38 minutes agoAustin community celebrates ‘Black Artists Matter’ mural before removal