Nearly a million IDs exposed on public internet

Security researcher Sammy Azdoufal discovered over 985,000 unprotected photo IDs, including passports and driver's licenses, accessible at public URLs with no password. The IDs belong largely to visitors of cannabis clubs in Spain, with 30,000 from the United States. Azdoufal used Claude Code to find the exposure.