IDScan sued over alleged data breach affecting 153 million drivers

Hackers allegedly breached IDScan's systems or otherwise accessed its data, resulting in the exposure of more than 153 million driver’s license scans, 10 million ID cards, 3 million travel documents, and 579,000 medical cards from U.S. and Canadian individuals. The data was advertised for sale on a dark web identity-theft service called Nexus, which has since been taken offline. The breach was reported by Brian Krebs and confirmed to be under FBI investigation. Lawsuits allege IDScan failed to protect client information, affecting businesses such as Hertz. The exact method of compromise and the full scope of impacted individuals remain unclear.

The breach potentially exposes highly sensitive personal identification documents of over 153 million individuals, including driver’s licenses and other government-issued IDs. This exposure increases the risk of identity theft and fraud for affected individuals. The incident has triggered multiple lawsuits and an FBI investigation, indicating significant legal and regulatory consequences for IDScan. The breach also impacts businesses relying on IDScan's verification services, potentially affecting their customers' data privacy.

No official statement or remediation guidance has been published by IDScan as of the current information. The FBI is investigating the incident. Affected businesses and individuals should monitor communications from IDScan and related entities for notifications and guidance. Legal actions are ongoing, and regulatory investigations may follow. Patch status is not applicable as this is a data breach incident rather than a software vulnerability. Check for updates from IDScan and law enforcement for remediation and mitigation steps.