• Sources: primary, HN item
  • Summary: TechCrunch reports identity verification vendor IDScan confirmed that driver's licenses were stolen from its cloud, including full names, licence numbers and identity numbers from other government documents such as passports, and states IDScan has not said how many individuals are affected. The figure of more than 150 million carried alongside this story originates with Brian Krebs, who reported a dark-web search site covering over 150 million US and Canadian licence records and verified his own record in it, and with IDScan's own website, which states it holds over 150 million licence records. Krebs found the record of US Secretary of Defense Pete Hegseth in that search site, and TechCrunch reports the Pentagon said last week that it was aware of the suspected breach.
  • Why it matters: An identity-verification vendor concentrates government document data for every customer that integrates it, so one breach reaches every site that outsourced the check.
  • Follow-up: Whether IDScan states how many individuals are affected and which customers' records are in the stolen set.

send feedback on this story