IDScan sued over alleged data breach affecting 153 million drivers
Summary
Identity verification company IDScan is facing multiple lawsuits following an alleged data breach. Hackers claim to have stolen and are offering for sale the driver's license information of over 153 million individuals.
IFF Assessment
FOE
The alleged exposure of sensitive driver's license data for a large number of individuals represents a significant win for attackers and a loss for defenders.
Defender Context
This incident highlights the ongoing risks associated with storing large volumes of personally identifiable information (PII). Defenders should focus on robust access controls, encryption, and proactive threat hunting to detect and prevent unauthorized data exfiltration.