IDScan sued over alleged data breach affecting 153 million drivers
Lawsuits have been filed against identity‑verification firm IDScan after a cyber‑attack allegedly exposed more than 153 million driver’s licenses and offered the data for sale. The legal filings allege that the breach occurred in March 2024 and that the stolen records were later listed on underground forums.
The breach, if true, would affect a large portion of U.S. residents who have used IDScan’s services for background checks, licensing, or other identity verification. The compromised information includes full driver’s license numbers, names, dates of birth and, in some cases, addresses. Hackers typically use such data to create counterfeit IDs, open fraudulent accounts, or launch targeted phishing emails that appear legitimate because they contain real personal details.
IDScan has not publicly confirmed the breach, and the company’s spokesperson said the allegations are “under review.” Nonetheless, the lawsuits cite a dark‑web post where a seller claimed to have the full dataset and offered it for $1,500. No evidence has emerged that the data has been used in actual fraud, but the potential for misuse is significant.
Consumers who suspect their driver’s license information may have been compromised should monitor their credit reports for unfamiliar activity and consider placing a fraud alert with the major credit bureaus. It is also advisable to review recent emails for signs of phishing, such as unexpected requests for personal information or links to unfamiliar websites. Free tools for checking credit and monitoring identity theft are available at ComputerScams.com, including step‑by‑step guides and reputable credit‑monitoring services.
If you receive an unsolicited email that references your driver’s license number, treat it as suspicious. Verify the sender through official channels before responding, and never click on links or download attachments from unknown sources. Updating passwords regularly and using two‑factor authentication add extra layers of security against account takeover.
The lawsuits seek class‑action status, aiming to hold IDScan accountable for alleged negligence in protecting sensitive data. While the case proceeds, the incident serves as a reminder that even reputable verification services can become targets for cyber‑criminals.
Stay vigilant by regularly reviewing your personal information online and using free identity‑theft protection tools. A quick check of your credit report can reveal unauthorized activity before it escalates.
Source: Read the original report