Security breach | Face ID

Hey everyone,

Something really weird happened to me twice and I decided to report it here. So, one of my friends and coworkers can unlock my phone, with face ID, with her face.

The first time it happened, we thought that this could be a bug and I reset the face ID. Indeed, she wasn't able to unlock it after this. This was on January 21st. However, this happened again 2 days ago and now she can unlock it again.

We have a recording of it, as well. It is actually terrifying as I have my card saved in my phone to pay with it, which is the most serious ones comparing to the access to my work email and chat, social media accounts, contacts, personal emails etc.

Has anyone experienced something like this? Do you know where can I send this to, to reach Apple technical team?