Canadian Privacy Commissioner Opens Investigation Into IDScan After Reported Data Breach
Summary
Canada’s privacy commissioner is investigating IDScan.net’s security practices and breach notifications after the company said hackers accessed cloud data and reports alleged theft of scans of 153 million driver’s licenses.
Key points
- Canada’s Privacy Commissioner Philippe Dufresne launched an investigation into IDScan.net.
- The probe will examine the company’s security practices and whether its customer notifications complied with federal private-sector privacy law.
- IDScan said hackers accessed data in its cloud platform but did not disclose how many customers were affected.
- Reports alleged that scans of 153 million driver’s licenses were stolen; the article does not establish that figure as confirmed.
- IDScan learned of the breach around September 1 and announced it on September 4, after journalist Brian Krebs reported that scans were being offered for sale on the dark web.
Article Details
- Event Type
- Canadian privacy regulator investigation following a reported data breach at IDScan.net.
- Impact
- Attackers reportedly accessed IDScan.net databases and stole personal data, including driver’s license scans. Reports cited scans of 153 million people, while IDScan.net confirmed that hackers accessed data in its cloud platform but did not disclose how many customers were affected. The investigation will examine the company’s security practices and whether its customer notifications complied with Canada’s federal private-sector privacy law.