Takuya Matsuyama, founder of Inkdrop, said reports of a security breach at identity verification company Persona were inaccurate, clarifying that exposed frontend source maps did not involve a hack, database breach or user data compromise.
The topic has drawn attention due to concerns about the safety of personal information and the accuracy of public reporting on cybersecurity incidents. Matsuyama addressed these concerns by emphasizing the limited nature of the exposure and highlighting steps taken by Persona’s leadership.
“Breach? Not even close. No hack, no DB leak, no user data out. Just frontend source maps (unminified feature names) exposed on a non-prod subdomain—names already public in docs/help center anyway. He owned it, posted full post-incident review, adding a perception lens to security checks so it doesn’t look sketch even if secure. Transparency W,” Matsuyama said according to his post on X.
Matsuyama’s comments align with statements from Persona CEO Rick Song. Song said the company was not hacked and no database was breached. He detailed that only unminified variable names for features were exposed and that these were already listed in the help center and API documentation. Song also announced new measures to add a perception lens to security reviews so configurations do not appear vulnerable according to his statement on X.
Persona has previously achieved ISO 27001 certification for its information security management system, meeting international standards for data protection. The accreditation covers controls for protecting customer information across its identity verification platform as reported by PR Newswire. The company also attained FedRAMP Authorized status at the Low Impact level after an assessment of its security controls. This enables Persona to serve federal agencies with verified compliance to federal standards including continuous vulnerability monitoring according to the company’s announcement.
Matsuyama is known for developing Inkdrop, a Markdown note-taking app that reached over $10,000 in monthly recurring revenue through branding and viral content. He operates a YouTube channel with more than 200,000 subscribers documenting coding projects and tutorials. His background includes a master’s degree in information science and prior experience at Yahoo Japan before becoming a freelance developer according to Indie Hackers.
