A database tied to IDMerit, a company that verifies identities, exposed 1 billion sensitive records across 26 countries, including 203 million in the US. The exposed data included full names, home addresses, dates of birth, and national ID numbers, which could be used for targeted phishing scams and SIM-swap attacks.