IDScan is facing multiple lawsuits and potential class-action claims following reports that criminals obtained more than 153 million driver’s licence scans. The identity verification company has not publicly confirmed a breach or disclosed how many people may be affected.
Leaked database allegedly held millions of identity documents
Reports first emerged on September 1 that an identity-theft service known as Nexus advertised access to a vast collection of identity documents.
The alleged database included more than 153 million US and Canadian driver’s licence scans. It also reportedly contained 10 million ID cards, 3 million travel documents and 579,000 medical cards.
Security journalist Brian Krebs verified samples by checking records belonging to himself and other consenting individuals. His investigation linked the alleged data source to IDScan.
IDScan provides hardware and software that businesses use to scan, authenticate and extract data from government-issued identity documents. Its technology is used by car rental companies, retailers, financial firms, gun shops, cannabis dispensaries and hospitality businesses.
FBI investigates the alleged IDScan data breach
The FBI’s New Orleans office has opened an investigation into the incident. The agency confirmed it is looking into the matter but declined to provide further detail.
IDScan has not released a public statement about the alleged breach. The company also did not respond to requests for comment.
It remains unclear whether IDScan’s systems were compromised or how many individuals were affected. However, reports indicate the company began notifying some business customers around September 1.
The Nexus service is no longer online. Nevertheless, cybercriminals may still have access to the alleged database.
Law firms pursue potential class-action claims
Several law firms have launched investigations into potential class-action litigation linked to the IDScan data breach.
Lawsuits filed in Louisiana, where IDScan is based, claim that the company failed to protect sensitive customer information. The legal action references data collected through business clients, including car rental company Hertz.
People whose identification documents were scanned by businesses using IDScan systems may be affected. As the investigation develops, further lawsuits could follow and related cases may be consolidated.
The possible scale of the incident could also attract scrutiny from state attorneys general and federal regulators. Large data exposures at companies such as 23andMe, Marriott and Equifax have previously resulted in regulatory action and major settlements.
0 responses to “IDScan faces lawsuits over alleged breach of 153 million driver’s licences”