Massive Data Breach at IDScan.net Exposes Millions of Driver’s Licenses in North America
Canada’s Privacy Commissioner has launched an investigation into a major data breach at IDScan.net, a company specializing in identity verification software used by businesses such as bars, casinos, and car rental agencies. The incident may have exposed millions of driver’s licenses and government-issued IDs from both Canada and the U.S.
IDScan.net disclosed the breach earlier this month, confirming that an unauthorized third party accessed or copied customer data stored in its cloud system. The company is notifying affected individuals and offering free credit monitoring services.
The breach came to light just days before the FBI confirmed it was investigating the theft of tens of millions of driver’s licenses being sold on the dark web. While the bureau acknowledged the incident, it declined further comment due to the ongoing investigation.
Cybersecurity experts describe the breach as unprecedented in scale. Zach Edwards, a threat researcher at Infoblox, stated that no prior incident has involved such a vast number of government-issued IDs, warning that the ongoing exposure poses national security risks, particularly for high-profile individuals.
Canada’s Office of the Privacy Commissioner is examining whether IDScan.net had adequate security measures in place and whether its breach notifications complied with federal privacy laws. The probe will also assess potential violations of Canada’s private-sector privacy regulations.
Source: https://www.cbc.ca/news/canada/idscan-net-data-breach-id-canada-9.7352859
IDScan.net cybersecurity rating report: https://www.rankiteo.com/company/idscan-net
"id": "IDS1790036825",
"linkid": "idscan-net",
"type": "Breach",
"date": "9/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Millions',
'industry': 'Identity Verification Software',
'location': 'North America',
'name': 'IDScan.net',
'type': 'Company'}],
'attack_vector': 'Unauthorized third-party access',
'customer_advisories': 'Notifying affected individuals, offering free credit '
'monitoring services',
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': 'Millions',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Driver’s licenses, '
'government-issued IDs'},
'description': 'Canada’s Privacy Commissioner has launched an investigation '
'into a major data breach at IDScan.net, a company '
'specializing in identity verification software used by '
'businesses such as bars, casinos, and car rental agencies. '
'The incident may have exposed millions of driver’s licenses '
'and government-issued IDs from both Canada and the U.S. '
'IDScan.net disclosed the breach earlier this month, '
'confirming that an unauthorized third party accessed or '
'copied customer data stored in its cloud system. The company '
'is notifying affected individuals and offering free credit '
'monitoring services.',
'impact': {'brand_reputation_impact': 'National security risks, potential '
'violations of privacy laws',
'data_compromised': 'Millions of driver’s licenses and '
'government-issued IDs',
'identity_theft_risk': 'High',
'systems_affected': 'Cloud system'},
'initial_access_broker': {'data_sold_on_dark_web': 'Tens of millions of '
'driver’s licenses'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Canada’s Privacy Commissioner'},
{'source': 'FBI'},
{'source': 'Zach Edwards (Infoblox)'}],
'regulatory_compliance': {'regulations_violated': 'Potential violations of '
'Canada’s private-sector '
'privacy regulations',
'regulatory_notifications': 'Canada’s Office of the '
'Privacy Commissioner'},
'response': {'law_enforcement_notified': 'FBI',
'remediation_measures': 'Notifying affected individuals, '
'offering free credit monitoring '
'services'},
'title': 'Massive Data Breach at IDScan.net Exposes Millions of Driver’s '
'Licenses in North America',
'type': 'Data Breach'}