Skip to content
InYourGeek
visiteur@inyourgeek — shell
↹ compléter↑↓ historique⏎ ouvrirhelp
FR
← Back to the register

IDScan

CriticalConfirmedDigital services

IDScan, an identity-verification company based in New Orleans, USA, confirmed on September 4, 2026 that customer data stored on its cloud platform was accessed without authorization around September 1, 2026. The disclosure followed the discovery, in early September, of a dark-web service offering access to more than 153 million North American driver's license scans, which security researcher Brian Krebs traced back to IDScan. The exposed information can include the full names of verified individuals, their driver's license or other government ID numbers, and scans of those documents.

This information allows a third party to impersonate the affected individuals, for example to open accounts or bypass age or identity checks by presenting their name together with their driver's license number or a scan of the document itself.

Disclosed on
September 4, 2026
Incident dated
September 1, 2026
Accounts affected
153M
Sector
Digital services
Country
United States
Cause
Undisclosed

Exposed data

  • Full name
  • Customer ID
  • Identity document

You are only affected if you had an account or an order with this organisation.

What you can do

  • These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
  • You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

Sources

Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact