Canada's privacy regulator has opened an investigation into IDScan.net after reports that a hacker stole personal data and scans of 153 million people's driver's licenses. Privacy Commissioner Philippe Dufresne announced the probe on Monday, focusing on the company's security practices and whether its notifications to victims met the requirements of Canada's federal private-sector privacy law.
IDScan.net, whose identity-verification technology is widely used in retail and hospitality, disclosed on September 4 that hackers had accessed user data in its cloud platform, but it did not state how many customers were affected. The company said it learned of the breach on or around September 1, hours after journalist Brian Krebs reported that the scans were being sold on the dark web.
The regulator's investigation is ongoing. IDScan.net did not respond to a request for comment.