A U.S. online gift card store, MyGiftCardSupply, exposed hundreds of thousands of customer identity documents online. A security researcher discovered the unsecured server. MyGiftCardSupply confirmed the lapse and is improving security measures. This incident highlights the risks of data breaches involving KYC checks.