Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:
Developer Tools JSONFormatter and CodeBeautify Found Exposing Thousands of Secrets
WatchTowr Labs has uncovered that JSONFormatter and CodeBeautify have been unintentionally exposing more than 80,000 saved JSON entries—containing cloud keys, API tokens, private keys, database credentials, and full KYC records—through publicly accessible “Recent Links” pages. Attackers appear to be actively scraping these sites: canary AWS credentials planted by researchers were probed within 48 hours, even after links expired. The findings highlight how often developers paste sensitive configuration and identity data into unsecured public tools, creating a major external exposure point. CISOs are being urged to revoke leaked credentials, scan for exposed secrets, and reinforce strict policies against using third-party formatting tools for sensitive data.
Indian Air Force Seeks Facial Recognition-Based Access Control Systems in Patna
A new tender shows the Indian Air Force requesting two facial recognition–based access control systems for installation in Patna, signaling continued movement toward biometrics across India’s defense sector. The procurement is routed through the Government e-Marketplace platform and appears intended for specific access points rather than broad deployment. While public summaries include no technical specifications, the listing aligns with India’s broader trend of integrating biometric authentication across civil and security infrastructure, including Digi Yatra and police facial recognition deployments.
Thailand Orders Worldcoin to Halt Iris Scans and Delete Biometric Data
Thailand’s Personal Data Protection Committee has ordered World (formerly Worldcoin) to stop iris enrollment operations and delete biometric data collected from more than a million Thai residents, citing failures in transparency, consent, and cross-border data safeguards. The ruling adds Thailand to a growing list of countries—including Germany and the Philippines—that have blocked or restricted the project due to privacy and data-protection concerns. The decision underscores regulators’ view that crypto-linked identity programs are still subject to strict biometric-data rules, regardless of incentives or voluntary participation.
authID Raises $3.7 Million in Direct Offering to Advance Biometric Identity Platform
authID has raised roughly 3.7 million dollars in a registered direct offering, providing additional capital to support its biometric authentication platform used for workforce and customer verification. The company markets face matching and liveness checks designed to prevent account takeover and deepfake-enabled fraud, and says the funding will support product development and commercial expansion. The raise follows earlier funding rounds and partnerships that include work with Ping Identity and Prove.
Imprivata Acquires Verosint to Deepen Identity Threat Detection and Passwordless Access
Imprivata has acquired Verosint to integrate identity-threat-detection and behavioral risk analytics into its enterprise access platform widely used in healthcare. The move is aimed at strengthening adaptive and passwordless access by combining risk signals with strong authenticators such as passkeys and facial verification. Imprivata says tighter, real-time detection of anomalous activity is increasingly essential for clinical environments where fast access to records must be balanced with strong identity controls.
Australian Immi App Brings Remote Passport and Facial Biometrics to Visa Process
Australia is expanding the availability of its Immi App, which lets eligible visa applicants submit facial biometrics and passport data remotely rather than visiting a collection center. Now available in 34 countries, the app captures a live face image and passport details, transmitting them to Home Affairs before deleting them locally. The rollout reflects a broader shift toward mobile-first identity proofing in global immigration workflows, though privacy groups may scrutinize device-linked data practices as adoption widens.
Seon Rolls Out Configurable AML Search Profiles and Richer Watchlist Screening
Seon has launched configurable AML Search Profiles that allow firms to tailor sanctions and watchlist screening to specific risks, including adjustable list prioritization and name-matching sensitivity. The update expands sanctions, PEP, and adverse-media coverage while refining workflows to reduce false positives. Seon frames the release as a way for compliance teams to move beyond one-size-fits-all screening, especially amid heightened regulatory expectations around risk-based AML controls.
Papua New Guinea Launches National Digital ID and Wallet Built on TECH5 Infrastructure
Papua New Guinea has launched a national digital ID system, SevisPass, and an accompanying identity wallet, SevisWallet, built on TECH5’s decentralized biometric infrastructure. The program introduces a tiered assurance model and early integrations such as bank account onboarding and city passes for Port Moresby. Government officials describe the system as the foundation of long-term digital public-services modernization, with TECH5 providing biometric capture, matching, and credential storage technologies.
FaceTec’s Jay Meier on Why Healthcare Has Become the Core Identity Challenge
In a new ID Talk interview, FaceTec’s Jay Meier argues that healthcare has become the primary target for identity-driven fraud because it concentrates the largest pool of high-value credentials and entitlement pathways. Meier says encrypted messaging and device protections do not solve the fundamental gap: the lack of reliable person-to-privilege binding. He notes that major fraud cases in U.S. healthcare and reactions from regulators suggest the sector is beginning to reevaluate its assumptions about identity and verification.
–
By the ID Tech Editorial Team