What happens next
Mobile-ID should acknowledge valid reports through the approved security channel, triage scope and severity, preserve evidence, coordinate remediation and communicate any customer-facing advisory through the governed security process. Response timing and disclosure terms depend on the affected service, contract and verified impact.