IDMerit's 3 Billion Record Breach: How Your Federal ID Ended Up On The Dark Web

TL;DR IDMerit, the identity verification contractor trusted by banks, government agencies, and enterprises, accidentally exposed 3 billion records in an unsecured cloud database. The exposed data includes names, dates of birth, national IDs, government verification documents, and social security numbers for 203+ million US residents. This is the largest government-adjacent data breach in 2026. What You Need To Know Company : IDMerit Global (identity verification, KYC compliance, government contracts) Scope : 3 billion records across 26 countries US Impact : 203+ million US records exposed What Was Exposed : Names, DOB, addresses, emails, phone numbers, national IDs, government verification documents Detection : Discovered by security researchers; impact unknown (exposure window unknown) Your Risk : High if you've ever verified identity online, opened a bank account, or completed government verification The Scale Is Staggering To put this in perspective: Breach Records Year Impact IDMer