KYC records are the identity verification files collected during customer onboarding and compliance checks. They commonly include passports, certificates, proof-of-address documents, and related forms used to confirm who a customer is and where funds are coming from.
In cyber security, KYC records are highly sensitive because they combine personal data, official identity documents, and financial context. If stolen, they can support identity theft, synthetic identity fraud, account takeover attempts, or targeted phishing against customers and staff. That is why these files often appear in extortion listings: they are easy to describe, legally sensitive, and valuable on criminal markets.
Defenders should treat KYC repositories as high-risk assets. Strong access control, encryption, logging, retention limits, and data loss prevention can reduce exposure. Segmentation is also important so a compromise in one system does not expose the full onboarding archive.