"A new investigation alleges that OpenAI’s identity verification vendor, Persona, operated dedicated watchlist screening infrastructure since 2023 and exposed 53MB of internal dashboard code via public source maps. Here’s what was discovered, what is confirmed, what remains unproven, and what it means for biometric data, compliance reporting, and online privacy in 2026."