Seven breaches, the same flaw seven times — and not one is a story about negligence: a secret kept somewhere, and questions whose answers never change. Your date of birth will not change. Neither will your address.
Driver's licences and passports listed for sale on the dark web, United States and Canada — a figure claimed by the sellers, not confirmed. This is not an isolated failing: it is the model. Verifying an identity today means keeping the document — and what is kept eventually gets out.
Customers affected. The investigation started from unusual log-in activity.
People whose data was stolen in a ransomware attack.
Data breaches since 2020. The Privacy Commissioner describes fraudsters who hacked nothing at all: they simply called, and answered the authentication questions correctly.
Customers served by the payment processor hit by ransomware. This number counts customers served, not records stolen: the scale of the theft is not quantified in any public source.
Members. One employee, twenty-six months, and nobody saw it. The company did not discover it: the police did.
Social insurance numbers, addresses, financial information — a first estimate, which may rise or fall. The attacker went underneath the application.
Every fact above comes from a public source — press or public authority — verifiable by anyone at the date shown. No affected organization is named, and none of these sources has any connection with Seal LIFAIO or recommends this service.
Access controls ask who.
A malicious employee is an authorized “who.”
No control failed. Every one worked exactly as designed, and every time it was right to say yes. A system that verifies identity cannot stop someone whose identity is legitimate.
Seal does not ask who.
It asks how many, and it asks for two.
Normal use reads one record at a time. Exfiltration reads millions. The threshold does not look at who is reading. It looks at what is being done.
What proves must change, and must be kept nowhere. Wherever someone has to prove something, it is the same mechanism.
We don't hold the key — we count. Below your threshold, Seal decrypts without interrupting anyone. Above it, nothing more gets out without human confirmations.
The server encrypts continuously, with no human involved. Decrypting requires two people or more. The key comes in two halves: one on your side, one stored nowhere and computed at the moment of the authorized opening.
Address change, bank account change, beneficiary change, deletion, export: your program stops and only resumes once two people or more have entered their code, each on their own.
A seal the visitor checks themselves, free, with a code that changes. An image can be copied. A changing code cannot.
The fingerprint is computed in your customer's own browser. The file never leaves their computer. They confirm it came from you before paying.
A rotating number. The impostor on the phone knows your date of birth; he does not know your code for this minute. Your employees have no account with us: there is no employee database to steal.
Surprise checks at moments nobody knows in advance. And your video proven authentic, even after the platform re-encodes it, even as a fifteen-second excerpt.
A ticket that is sealed, not printed: its code changes, so a photo is worth nothing. Door verification even with no network. Resale above face value is off by default and opens only with the agreement of the production and the venue. And Seal holds no buyer's name.
“I have printed the recovery export and stored it off this server. I understand that if I lose both my share and that export, my files will be permanently unreadable, and neither I nor Seal LIFAIO will be able to recover them.”
Every customer ticks that box, in eighteen languages. Nobody has you sign that if they are keeping a back door.
Others watch you.
We ask you.
GPS, a camera, a fingerprint: these are sensors. They measure a person, then produce data that has to be kept somewhere — and we are back where we started. At Seal, the human is the mechanism, never the subject.
Database, archives, sensitive actions, site, invoices, presence. Unlimited reads, never billed per read.
Register my companyA sixteen-digit number that rotates. Whoever calls your bank pretending to be you cannot produce it. Free to verify, in ten seconds.
$5 once, then $1.99 / month Protect meSeal your video before publishing. Anyone can then confirm that no frame was altered.
See the methodNo backup, no antivirus, no intrusion detection, no payroll. It is not a guarantee against fraud, and each institution decides its own procedures. Once an opening is authorized, the key lives in memory for the duration of the operation: this protects against the exfiltration of a snapshot — not against an attacker installed permanently. No mechanism protects against both.
