IDScan Confirms Breach Tied to Millions of Stolen Licenses

Identity verification firm IDScan has confirmed that hackers accessed customer data stored in its cloud, an intrusion tied to a darkweb trove of more than 153 million drivers license scans from the United States and Canada. The Louisiana-based company disclosed the incident in a September 4 notice, saying it learned on or around September 1 that an unauthorized third party may have accessed or copied customer information held on the IDScan.net cloud, including full names and drivers license or other government-issued identification numbers. The company said it immediately began an investigation, took steps to secure its systems and engaged third-party specialists to determine the full nature and scope of the incident. It is also cooperating with federal law enforcement. The FBI's New Orleans field office opened a formal investigation on September 1, according to reporting by security journalist Brian Krebs, who first disclosed the breach. An FBI spokesperson confirmed the bureau was looking into the incident but declined further comment.