Multiple class-action lawsuits have been filed against identity verification company IDScan following allegations of a data breach impacting over 153 million driver's license records. Plaintiffs claim the company failed to adequately protect sensitive personal information, while hackers allegedly breached the service and offered to sell the dataset. The incident, reported by BleepingComputer on September 4, 2026, raises concerns about identity theft and fraud risks for affected drivers.

What should defenders do?

Affected individuals should monitor financial accounts, place fraud alerts with credit bureaus, and remain vigilant for phishing attempts. IDScan should implement enhanced security measures and transparent breach notification. Organizations using IDScan services should verify compliance and data protection agreements.

highData Breaches

IDScan Facing Lawsuits Over Alleged 153 Million Driver's License Data Breach

Plaintiffs allege identity verification company failed to protect sensitive driver records, with hackers reportedly offering data for sale

CyberIntel DeskPublished 25 days agoUpdated less than a minute ago1 min read

IDScan Facing Lawsuits Over Alleged 153 Million Driver's License Data Breach

Key Takeaways

Class-action lawsuits filed against IDScan over alleged breach of 153 million driver's license records
Hackers reportedly breached IDScan's identity verification service and offered data for sale
Plaintiffs allege inadequate protection of sensitive personal information
Affected drivers face increased risk of identity theft and fraud

Related Security News

highData Breaches

Times Car Confirms Data Breach Affecting 6.6 Million User Accounts

Times Car, a Japanese car-sharing service, has confirmed a data breach compromising approximately 6.6 million user accounts. The incident was disclosed late last week, with the exact attack vector and nature of exposed personal information yet to be fully specified. Authorities and the company are reportedly investigating the breach.

BleepingComputerabout 4 hours ago1 min read

highData Breaches

Misconfigured Supabase Apps Expose Data in Over 16,000 Databases

Security researchers have identified more than 16,000 Supabase-backed applications with publicly accessible databases. The exposure stems from default allow rules that permit unrestricted read access to tables containing personally identifiable information, passwords, and authentication tokens. The findings highlight the risk of misconfigured backend-as-a-service platforms when security defaults are not adjusted for production use.

BleepingComputer1 day ago1 min read