IDScan confirmed unauthorized access to cloud-stored customer data after reports linked it to 153 million driver's license scans. The public lesson is to collect less, retain less, and verify carefully.
BleepingComputer reported on September 10, 2026, that IDScan confirmed unauthorized access to customer data stored in its cloud platform. The report followed earlier claims connecting the incident to a dark-web service advertising access to more than 153 million driver's license scans.
The lesson is bigger than one company. Identity verification can become identity accumulation when document images, names, and government ID numbers remain stored long after the original check is complete. Data that cannot easily be changed has a long afterlife in phishing, impersonation, and fraud.
Why it matters for verification
Verification should prove what is needed with the least lasting exposure. Users should be cautious about uploading identity documents to unknown links, and businesses should keep retention rules strict, documented, and easy to enforce.
BillioPlus checklist
- Ask why an ID copy is needed before uploading it anywhere.
- Use official portals rather than links sent in unexpected messages.
- Consider credit freezes or monitoring after large identity-data incidents.
- Separate public contact details from the phone number used for sensitive account recovery.
Source links
Tags
Chinedu Celestine Okpala
BillioPlus Team · Content & Guides