IDScan: IDScan Data Breach Exposes Driving License and Personal Information of US and Canadian Citizens

IDScan Data Breach Exposes Sensitive Personal Information of U.S. and Canadian Residents

A significant data breach at IDScan, a Louisiana-based identity verification company, has exposed sensitive personal information belonging to residents of the United States and Canada. The compromised data reportedly includes driver’s license numbers, passport details, photographs, names, and contact information, raising concerns about identity theft and fraud.

The breach came to light after cybersecurity journalist Brian Krebs was alerted to a dark web link containing a database of stolen records. Among the exposed data were details linked to Krebs himself and several high-profile individuals in technology, entertainment, and politics. While unauthorized access may have occurred as early as 2025, the full extent of the breach only gained widespread attention recently.

IDScan provides identity verification services to businesses, including those in entertainment and tech sectors, where customers often submit official IDs for access to restricted services. The exposure of such data poses serious risks, as cybercriminals can combine leaked information such as names, addresses, phone numbers, and identification numbers to create detailed victim profiles for phishing, social engineering, and financial fraud.

The FBI has confirmed it is investigating the incident, working to determine the scope of the breach, how the data was accessed, and the duration of unauthorized exposure. The agency’s involvement underscores the severity of the leak, particularly given the sensitivity of driver’s license information, which can be exploited for impersonation and targeted scams.

The breach highlights vulnerabilities in how companies handle identity verification data and the potential consequences when such information falls into the wrong hands. With cybercriminals increasingly leveraging leaked data alongside publicly available details, the incident serves as a critical reminder of the risks associated with large-scale personal data exposure.

Source: https://www.cybersecurity-insiders.com/idscan-data-breach-exposes-driving-license-and-personal-information-of-us-and-canadian-citizens/

IDScan.net cybersecurity rating report: https://www.rankiteo.com/company/idscan-net

"id": "IDS1789115243",
"linkid": "idscan-net",
"type": "Breach",
"date": "1/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Residents of the United States '
                                              'and Canada',
                        'industry': 'Identity Verification',
                        'location': 'Louisiana, USA',
                        'name': 'IDScan',
                        'type': 'Company'}],
 'data_breach': {'data_exfiltration': 'Yes',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Driver’s license numbers',
                                              'Passport details',
                                              'Photographs',
                                              'Names',
                                              'Contact information']},
 'description': 'A significant data breach at IDScan, a Louisiana-based '
                'identity verification company, has exposed sensitive personal '
                'information belonging to residents of the United States and '
                'Canada. The compromised data includes driver’s license '
                'numbers, passport details, photographs, names, and contact '
                'information, raising concerns about identity theft and fraud. '
                'The breach came to light after cybersecurity journalist Brian '
                'Krebs was alerted to a dark web link containing a database of '
                'stolen records. The exposure poses serious risks, as '
                'cybercriminals can combine leaked information for phishing, '
                'social engineering, and financial fraud.',
 'impact': {'brand_reputation_impact': 'High',
            'data_compromised': 'Driver’s license numbers, passport details, '
                                'photographs, names, contact information',
            'identity_theft_risk': 'High'},
 'initial_access_broker': {'data_sold_on_dark_web': 'Yes'},
 'investigation_status': 'Ongoing (FBI)',
 'lessons_learned': 'The breach highlights vulnerabilities in how companies '
                    'handle identity verification data and the potential '
                    'consequences when such information falls into the wrong '
                    'hands.',
 'references': [{'source': 'Brian Krebs'}],
 'response': {'law_enforcement_notified': 'FBI'},
 'title': 'IDScan Data Breach Exposes Sensitive Personal Information of U.S. '
          'and Canadian Residents',
 'type': 'Data Breach'}