Canadian regulator opens probe of IDScan for allegedly violating data privacy laws
Canada's Privacy Commissioner is investigating IDScan.net after hackers stole driver's license scans of 153 million people.
Privacy Commissioner of Canada Philippe Dufresne opened an investigation into IDScan.net after an attacker penetrated its databases, stealing personal data and driver's license scans belonging to 153 million people. IDScan learned of the breach around September 1, hours after journalist Brian Krebs reported the scans were being sold on the dark web. The probe will examine IDScan's security practices and whether victim notifications complied with Canada's federal private-sector privacy law. IDScan's ID verification technology is widely used in retail and hospitality.
- Driver's license scans of 153 million people stolen
- Data appeared for sale on dark web per Krebs report
- Probe examines security practices and adequacy of notifications
- IDScan verification tech widely used in retail and hospitality
Full article172 words · extracted from therecord.media · click to collapse
Privacy Commissioner of Canada Philippe Dufresne has launched a probe of IDScan.net in the wake of reports that a bad actor penetrated company databases to steal personal data and scans of 153 million people's drivers’ licenses. IDScan.net’s technology is widely used by industry — particularly in the retail and hospitality sectors — to verify official IDs. The investigation, announced Monday, will probe IDScan’s security practices and whether victim notifications were adequate under Canada’s federal private-sector privacy law, the regulator said in a press release. On September 4, the identity verification company announced hackers obtained user data held in its cloud platform, but did not say how many customers were affected. The statement came amid a series of reports asserting that the breach exposed driver’s licenses belonging to tens of millions. IDScan learned of the breach on or around September 1, hours after journalist Brian Krebs revealed the scans were on sale on the dark web. The identity verification company did not respond to a request for comment. The investigation is ongoing.
Text extracted automatically; images, tables and formatting may be missing. Original: https://therecord.media/canadian-regulator-opens-probe-of-idscan-following-data-breach