IDScan Confirms Data Breach Exposing 153 Million Driver's License Scans
Identity verification firm IDScan has confirmed a data breach in its cloud platform, leading to the exposure of approximately 153 million driver's license scans. The company became aware of the incident around September 1, the same day a journalist reported on dark web activity offering access to this data. The compromised database also contained scans of 10 million identification cards, over three million travel documents, and at least 579,000 medical cards. The information potentially accessed includes full names and government-issued identification numbers. The incident became public after independent cybersecurity journalist Brian Krebs reported that a dark web marketplace, Nexus, was selling access to these records, which Krebs authenticated by verifying his own and others' data. IDScan's security notice, posted on September 4, indicated that an unauthorized third party may have accessed or copied customer information.
