ON · 2026-10-28 01:26 UTC

What a KYC Provider Should Prove After a Data Breach

Two KYC data breaches in September (Revolut and IDScan.net) exposed the industry's inability to quickly prove what data was held, altered, or accessed. KYC providers lose three things in a breach: the data itself, customer/regulator trust, and evidence of what happened to records. Zero-knowledge KYC and selective disclosure reduce stored data but don't solve the core problem: providers still can't prove to regulators what was held and who accessed it without re-exposing the data.

Loading the story on Tree News…