Even Fantom ICO which is hyped at the moment has a leak in KYC data, hackers stole KYC data of more than 70 k participants!
It was due to http connection and low protection.
Of course, KYC data leakage will occur even when ICO projects and their teams are normal, with no signs of fraud. After all, they are not at all interested in keeping our confidential data. For them, this data is generally useless.
As long as the activities of the ICO will not be regulated by the state, there will be no order in it.
In addition, the KYC check is generally illegal for bounty hunters, since we are not investors in ICO projects.