CuraSec

Act active

IDScan sued over breach allegedly exposing 153M driver's licenses

2026-09-05 13:51 UTC · BleepingComputer · read the source ↗ #data-breach#identity-verification#litigation
  • Engineer — Skip
  • SOC/IR — Learn: A breach at a major identity verification vendor exposes the scale of risk in third-party ID data aggregators; no IOCs or TTPs published yet to act on.
  • Leader — Act: If your organization uses IDScan for identity verification, confirm your vendor exposure now and request an incident attestation; this scale of driver license exposure may trigger customer or regulatory inquiries regardless of direct involvement.
This entry was curated and judged by AI (Claude) with automated enrichment (CISA KEV / EPSS / public PoC). Verify against the original source before acting. Found a bad verdict? Report it — confirmed errors go to the corrections log.