Canada Probes IDScan After Breach of 153M Driver's Licenses
Privacy Commissioner opens investigation into IDScan.net's security practices and breach notifications after stolen ID scans of 153 million people appeared on the dark web.
Canada's privacy regulator has opened an investigation into IDScan.net after reports that a hacker stole personal data and scans of 153 million people's driver's licenses. Privacy Commissioner Philippe Dufresne announced the probe on Monday, focusing on the company's security practices and whether its notifications to victims met the requirements of Canada's federal private-sector privacy law.
IDScan.net, whose identity-verification technology is widely used in retail and hospitality, disclosed on September 4 that hackers had accessed user data in its cloud platform, but it did not state how many customers were affected. The company said it learned of the breach on or around September 1, hours after journalist Brian Krebs reported that the scans were being sold on the dark web.
The regulator's investigation is ongoing. IDScan.net did not respond to a request for comment.
More in Security & Privacy
AI Relay Servers Mask Chinese Access to US Frontier Models
More than 80,000 AI relay servers are helping users in China hide their identities while accessing cutting-edge US AI models, likely to clone them.
Sweden Fines Miljödata $183,000 for Breach Affecting 2.2 Million
Sweden's privacy regulator penalized IT provider Miljödata for security failures linked to a breach that exposed 2.2 million people's data.
Rogue External MFA Providers Can Steal Passwords in Login Attacks
Researchers show that attackers with privileged access can register a malicious external MFA provider that harvests passwords during otherwise legitimate logins.
Rogue AI Incidents Push Safety Debate From Theory to Practice
A wave of misalignment reports is forcing AI labs, enterprises, and governments to confront real-world control and security gaps.