FBI investigates breach of 153 million driving license records at IDscan.net
Summary
A data breach affecting IDscan.net has exposed digital scans of 153 million driver's licenses, 10 million identification cards, and other sensitive documents, which are now being sold on the dark web. The FBI is investigating the source of the leak, which has raised concerns about the security of third-party identity verification services used by major corporations.
IFF Assessment
The exposure of sensitive personal information like driver's licenses and identification cards on the dark web is a significant security failure that empowers malicious actors.
Defender Context
This incident highlights the critical importance of supply chain security and third-party risk management. Defenders must rigorously vet the security practices of their vendors, especially those handling sensitive customer data. Organizations should also implement robust monitoring for dark web marketplaces to detect potential exfiltration of their customer data.