Source: TechCrunch · Security

2 stories in the last 30d

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Data breach 8 Policy & legal 6 Industry 4 AI safety & security 4 Threat actor 2 Exploit / PoC 2 Phishing & fraud 2 AI industry 1 AI policy 1 Ransomware 1 Malware 1

SeverityAll critical 2 high 10 medium 8 low 0 info 12 source: TechCrunch · Security ✕

ID verification giant IDScan confirms data breach with more than 150 million driver’s licenses stolen

ID verification firm IDScan confirms hackers stole over 150 million driver's license records, including names and license numbers, from its cloud.

IDScan confirmed that threat actors stole driver's license records — full names, license numbers, and other government ID numbers — from the company's cloud systems during a roughly year-long intrusion. Brian Krebs previously reported a dark web service exposing data on over 150 million US and Canada residents, including license photos and records of high-profile individuals such as Defense Secretary Pete Hegseth. The FBI is investigating, and IDScan indicated hackers apparently demanded payment for full access to the stolen cache; the investigation is ongoing.

TechCrunch · Securityupdated Sep 11, 09:59 UTC · 5d agofirst Sep 10, 13:21 UTC · 6d agoData breach in the wild 4 sources1

It sure looks like hackers breached a major ID card verification service

Suspected breach of ID verification firm IDScan exposed over 150 million US and Canadian driver's licenses and passports, sold via dark web site Nexus.

Independent journalist Brian Krebs reported that a dark web site called Nexus is selling searchable access to more than 150 million driver's licenses and passports belonging to people in the United States and Canada, adding roughly 500,000 documents daily from a 'major identity verification company.' Krebs and researcher Zach Edwards identified Louisiana-based identity verification service IDScan as the likely source; Krebs' own license and Defense Secretary Pete Hegseth's records appeared in the database. The FBI confirmed it is looking into the incident and IDScan says it is investigating; Nexus went offline shortly after the report went live.

TechCrunch · SecuritySep 2, 19:35 UTC · 14d agoData breach in the wild