A prominent identity verification firm that has contracted with TikTok, Uber, X, and other large platforms, left a set of administrative login credentials exposed to the internet for more than a year, according to a report from 404 Media. The credentials could have allowed a bad actor to access sensitive user…