Signal IDScan.net confirms breach exposing over 150 million driver's licenses

Summary

Identity verification vendor IDScan.net officially confirmed that an unauthorized party accessed and copied customer data stored on its cloud. The confirmation came roughly ten days after cybersecurity journalist Brian Krebs first reported the breach. The Louisiana-based company, which provides identity checks for car rental firms, retailers, and cannabis dispensaries, said the exposed data includes more than 153 million driver's licenses, 10 million ID cards, 3 million travel documents, and 579000 medical cards, along with full names, government ID numbers, and photos. A newly launched dark-web identity theft marketplace had been selling searchable access to the stolen records. The FBI's New Orleans field office opened a formal investigation, and IDScan.net said it is cooperating with law enforcement and has hired outside forensic specialists to determine the full scope of the incident.