Data Breaches · Credential Theft

IDScan cloud breach exposes centralized ID scans

IDScan.net has confirmed that unauthorized access to its cloud accounts around Sept. 1 exposed customer data, after a dark-web listing claimed access to more than 153 million driver’s license scans and other identity documents. The company says it is working with third-party specialists and cooperating with federal law enforcement.

The exposure matters because IDScan is the place many businesses send identity checks, so the compromise is not one person’s stolen file but a pooled store of scans and ID numbers. Once that cloud trove is reached, a thief can copy large batches of licenses and government IDs at once, turning verification data into fraud material.

For transportation, retail, rental-car, cannabis, and other operators that rely on a centralized ID-verification service, the blast radius now extends beyond their own customer accounts. The reporting still leaves the full scope open, but the confirmed provider-side intrusion means the risk sits with every queue of scanned IDs the service held.

8 sources · Sep 11

Timeline

Sources

Part of the PlainSec briefing for 2026-09-10

Every edition of this story: IDScan cloud breach exposes centralized ID scans

More from today