IDScan confirms breach involving more than 150 million driver’s licence records

A breach involving identity documents is not the sort of incident that can be filed under ‘change your password and move on’. IDScan says attackers stole driver’s licences and other government-issued documents from its cloud systems, creating obvious risks around impersonation, fraud and long-term identity abuse.

What is happening

TechCrunch reports that IDScan confirmed the incident on 10 September. The reportedly affected information includes full names, driver’s licence numbers and other identity-document data. IDScan’s website says it holds more than 150 million driver’s licence records, but that figure is not the same as a confirmed number of affected individuals.

KrebsOnSecurity reported that a searchable database containing more than 150 million records had been identified, and TechCrunch says the FBI and Pentagon were aware of or investigating the incident. The company’s investigation is ongoing, so the intrusion method, duration, ransom question and final scope remain unclear.

The primary IDScan incident notice was included as a source but returned HTTP 403 during retrieval, so its contents could not be independently read in this run. The breach details should therefore remain attributed to IDScan and the reporting until the notice is accessible and the company publishes clearer guidance for affected people.

Our opinion

This is a high-priority warning, but the number in the headline needs careful handling. ‘More than 150 million records’ does not automatically mean 150 million people were harmed, and identity documents are not passwords that can simply be reset. IDScan needs to explain what was exposed, who is affected and what protection it will provide. Until then, organisations using identity-verification services should treat this as a reminder that the cloud still has a front door — and someone occasionally forgets to lock it.