Major US ID Documents Breach

US identity verification provider IDScan.net has confirmed unauthorised access to data held within its cloud platform, following reports that millions of scanned identity documents had been offered for sale on a cybercrime forum.

The New Orleans-based company said that, on or around 1 September, it received information indicating that certain data may have been accessed without authorisation. IDScan.net subsequently secured its systems, engaged third-party specialists and began an investigation, which remains ongoing.

According to the company, an unauthorised third party may have accessed or copied customer information stored within accounts on the IDScan.net cloud. The affected information may include full names and driving licence or other government-issued identification numbers.

Reports relating to the incident have indicated that the exposed dataset could contain more than 170 million identity-document scans, including approximately 153 million driving licences. IDScan.net has not independently confirmed these figures in its public notification.