Chum1ng0 - Security Research 
Cuba: 63,564 AIS Remittances Clients' information was exposed on an unsecured server.
What did the unsecured server expose?
Customer affidavits, IDs, and debit cards.
The affidavits contained:
This affidavit contained client information, such as: name, mobile phone number, telephone number, email address, address, country, province, city, town, postal code, date of birth, country of birth, passport number, country of issue, and expiration date.
You may also notice that there was a section called "Beneficiaries," which included the beneficiary's name, their ID number, and the reason for the transfer, which in all cases was "family support."
I tried to notify the company, but their aisremesascuba email address was unavailable. I notified CIMEX S.A., and within a few days, access was blocked.
Those affected (Customers) by this breach may be at risk of scams because the server has been exposed since March 2025.
https://www.security-chu.com/2025/10/AIS-Remesas-Cuba-%20expone-145GB-en-servidor-sin-seguridad.html
Dissent Doe 