Money transfer app Duc exposed thousands of driver’s licenses and passports to the open web

An uncovered Amazon-hosted server allowed anybody to entry reams of buyer information without having a password.