The security community has long worried about what artificial intelligence could do with private data — but VanishID founder and CEO Matt Polak is set to argue that the AI threat to identity systems doesn’t need any stolen secrets at all. Speaking at Identiverse Washington D.C. on November 9-10, 2026, at MGM National Harbor, Polak will deliver a session titled “What AI Needs to Beat Your Identity Controls Is Already Public.” The talk, hosted by the external identity security company VanishID, will walk through how attackers weaponize information that is already freely available — breach data, professional profiles, and other public exposure — to supercharge AI-driven impersonation, account recovery abuse, and targeted phishing campaigns.
Why should identity and security leaders pay close attention? The answer lies in a sobering reality: external identity data, breach records, and professional profiles already supply the raw ingredients attackers need to convincingly impersonate employees. Polak’s session will examine how AI dramatically accelerates the assembly of those details into highly targeted attacks against help desks, account recovery workflows, and other identity verification processes that organizations rely on every day.
To illustrate the threat in concrete terms, Polak plans to walk through a help desk impersonation scenario from start to finish. He will identify the specific facts an attacker needs, pinpoint where that information lives online, show which verification steps it can undermine, and lay out the countermeasures that can actually interrupt the attack chain. The goal is to give attendees a clear, end-to-end picture of how these attacks unfold — and how to stop them.
Also worth a look: Based Trading Cards lands on HoloHoard to give collectors real-time serial tracking and value tools and Medical Marketing Whiz offers free webinar on becoming the provider AI recommends.
Beyond the immediate threat, the session will push attendees to think more strategically. Polak will explain how organizations can build an external identity security practice that fits within their existing identity program — and why those defenses must operate continuously, since new information becomes exposed all the time.
Event details are as follows:
- Event: Identiverse Washington DC Regional 2026
- Speaking session: What AI Needs to Beat Your Identity Controls Is Already Public
- Presenter: Matt Polak, Founder and CEO for VanishID
- Location: MGM National Harbor
About VanishID
VanishID describes itself as an external identity security company that uses agentic AI to identify and neutralize the exposed identity information attackers use to target employees, executives, and their families. More than 100 organizations — including Fortune 500 enterprises, financial institutions, health systems, and public sector agencies — rely on VanishID. The company holds SOC 2 Type II certification and is backed by Dell Technologies Capital, Crosslink Capital, Rally Ventures, and other investors. Headquartered in Bethesda, Maryland, VanishID was founded in 2019.
Learn more at vanishid.com.
Marketing
VanishID
marketing@vanishid.com
Visit us on social media:
LinkedIn
YouTube
X
Why it matters: As AI tools become more accessible, the line between public data and exploitable threat intelligence is vanishing. Organizations can no longer assume their identity controls are safe simply because no breach has occurred — the information needed to bypass them may already be a Google search away. Building continuous external identity monitoring into existing security programs is no longer optional; it is becoming a baseline requirement for defending against AI-enabled impersonation.
