Breaches and incidentsBriefReported by a reputable outlet, citing the company

IDScan.net: ID-verification cloud breached, up to 153 million driver’s licence scans offered on a dark-web service

IDScan’s notice (4 Sep) says an unauthorized party “may” have accessed or copied customer information in accounts on its IDScan.net cloud.

Disclosed

What happened

  • IDScan’s notice (4 Sep) says an unauthorized party “may” have accessed or copied customer information in accounts on its IDScan.net cloud: names and driver’s licence or ID numbers. KrebsOnSecurity reported a dark-web service, “Nexus”, advertising 153 million US and Canadian licence scans plus 10 million ID cards and 3 million travel documents, and verified samples. IDScan has not confirmed a count.
  • Root cause: not disclosed.
  • Unnamed actors; FBI investigating; several sellers claim the full database.
  • Credit monitoring offered; lawsuit filed.

Sources

This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.