Identity Verification Provider IDScan.net Discloses Data Breach

Data Breach

IDScan.net, a provider of identity verification models, has posted a notification of data security incident on its website.

    Get the Full Story

    Complete the form to unlock this article and enjoy unlimited free access to all PYMNTS content — no additional logins required.

    Subscribe to our daily newsletter, PYMNTS Today.

    By completing this form, you agree to receive marketing communications from PYMNTS and to the sharing of your information with our sponsor, if applicable, in accordance with our Privacy Policy and Terms and Conditions.

    In the notification, IDScan.net said it received information on or around Sept. 1 that some of its data may have been accessed without authorization. The company then took steps to secure its systems and engaged a team of third-party specialists who are currently investigating the full nature and scope of the incident, according to the notification.

    IDScan.net has determined that an unauthorized third party may have accessed and/or copied certain customer information store within their accounts on the company’s cloud, including full names, driver’s licenses and other government-issued identification numbers, per the notification.

    “In response to this incident, we immediately began an investigation and reviewed our policies and procedures related to data security,” IDScan.net said in the notification. “We are also cooperating with federal law enforcement on their investigation.”

    Bloomberg reported Friday (Sept. 4) that the FBI was investigating a possible data breach that may have exposed millions of American driver’s licenses. The report said that a listing selling access to more than 160 million North American driver’s licenses appeared on a Russian-language cybercrime forum and that the source of the stolen data wasn’t clear.

    Independent journalist Brian Krebs first reported the breach and confirmed the authenticity of some documents with nine people whose licenses were listed for sale.

    An FBI spokesperson told Bloomberg the bureau was looking into the incident, but declined further comment given the ongoing investigation.

    PYMNTS reported Sept. 3 that the reported ID theft episode could be a stress test for the identity verification economy because the evidence used to prove an identity may have become part of fraudsters’ toolkits.

    Because criminals can potentially use legitimate identity documents to make fraudulent applications look more credible, the financial system is challenged to not only detect a fake document but also determine whether the person presenting an authentic document image is entitled to use it.

    The PYMNTS Intelligence report “2025 State of Fraud and Financial Crime in the United States” found that 68% of financial institutions increased their fraud-detection spending in 2025.