IDScan Acknowledges Massive Theft of Driver's License Data
IDScan confirmed that hackers stole driver's licenses and other government IDs from its cloud systems. The breach exposed names, license numbers, and passport details for over 150 million people. The company is investigating and has posted a notice, but has not disclosed ransom demands.
The breach was first publicized by cybersecurity journalist Brian Krebs, who discovered a dark web search tool containing records for over 150 million U.S. and Canadian residents, including photographs. The database reportedly included the personal data of high-ranking officials like Defense Secretary Pete Hegseth. Federal agencies, including the FBI and the Pentagon, have acknowledged awareness and are investigating the incident.
IDScan's notice indicates that hackers demanded payment to unlock the full stolen dataset, though the company has not disclosed whether a specific ransom was issued. While the firm has not confirmed the exact number of victims, it acknowledges holding more than 150 million driver's license records in its systems. The company has remained silent on further details regarding the attackers' demands.
The exposure of over 150 million government-issued IDs could significantly elevate the risk of identity theft and financial fraud for affected individuals. Because these documents are used for age verification and access control, the stolen data may enable criminals to impersonate victims at venues or in transactions. This incident could also undermine public confidence in third-party verification services, potentially prompting businesses to reconsider their reliance on such vendors and accelerating calls for stricter data protection standards.