IDScan Confirms Possible Customer Data Exposure Linked to 153 Million License Scans
Summary
IDScan says an unauthorized party may have accessed or copied customer data, including names and government ID numbers. The incident is linked to a database advertised with over 153 million license scans; the company is investigating with the FBI and offering identity-
Key points
- IDScan said it learned around September 1 that customer information in its cloud platform may have been accessed without authorization.
- Potentially exposed information includes full names and driver’s license or other government-issued ID numbers.
- Reports linked IDScan to a database advertised with more than 153 million U.S. and Canadian driver’s license scans; other identity documents were also reportedly included.
- Journalist Brian Krebs said he verified database samples and traced the information to IDScan; the company has not confirmed the full scope of exposure.
- IDScan engaged third-party specialists, secured its systems, and is cooperating with federal law enforcement; the FBI confirmed it was investigating.
- The company is notifying potentially affected individuals and offering free credit monitoring and identity protection.
Article Details
- Victim Organization
- IDScan
- Victim Domain
- IDScan.net
- Incident Type
- Unauthorized access to customer data stored in IDScan's cloud platform; the company said information may have been accessed or copied.
- Data Types Exposed
- Full names
- Driver’s license numbers
- Other government-issued identification numbers
- Driver’s license scans (reported, not confirmed by IDScan)
- Affected Records
- A dark-web platform advertised access to a database containing more than 153 million driver’s license scans. The service allegedly also contained 10 million ID cards, 3 million travel documents, and 579,000 medical cards. These figures describe the advertised database and are not confirmed counts of records exposed in the IDScan incident.
- Operational Impact
- IDScan said it took steps to secure its systems and is investigating with third-party specialists and federal law enforcement. No operational disruption was reported.
- Ransom Or Extortion
- Multiple threat actors reportedly claimed to be selling the database, but BleepingComputer could not confirm whether the sales were legitimate. No ransom demand was reported.
- Claim Status
- confirmed