What could be accessed were customer-scanned copies of Aadhaar or PAN cards, which are usually submitted by applicants during KYC.