Canada investigates major identity document data breach

The Office of the Privacy Commissioner of Canada, led by Philippe Dufresne, has launched an official investigation into a major data breach involving IDScan.net. The company, which provides identity verification services for sectors such as hotels, car rentals, and casinos, confirmed that an unauthorized third party gained access to its cloud platform.

The breach involves sensitive digital copies of identification documents, including driver's licenses belonging to both Canadians and Americans. These digital copies may contain full names, dates of birth, addresses, signatures, and license numbers. Experts warn that unlike passwords, these identity details cannot be easily replaced, increasing the risk of identity theft, fraudulent account openings, and phone number hijacking.

IDScan.net is currently notifying potentially affected individuals and offering free credit monitoring services. The investigation will focus on the company's security measures, its notification processes, and compliance with federal privacy legislation.