ID verification company IDScan confirmed a data breach involving the theft of more than 150 million driver’s licenses, the company disclosed on September 10. The breach affects a significant volume of sensitive personal information, raising concerns about identity security and data protection practices.
The breach was detected after unusual activity was noticed in IDScan’s systems, prompting an internal investigation. The company immediately engaged cybersecurity experts to assess the scope and impact of the incident. IDScan notified affected parties and relevant authorities as part of its response protocol, emphasizing transparency and cooperation with law enforcement agencies.
This breach highlights ongoing vulnerabilities in the identity verification sector, where large-scale data collections are frequent targets for cybercriminals. Comparable incidents in recent years have involved major data aggregators and government databases, underscoring the challenges of securing personal data at scale. The incident may prompt tighter regulatory scrutiny and increased demand for stronger encryption and access controls within the industry.
IDScan is currently working with cybersecurity firms to enhance its defenses and prevent future breaches. The company has committed to providing regular updates to customers and regulators. The breach notification letters were sent to all affected individuals by September 9, marking a critical step in the company’s mitigation efforts.