Canada investigates massive IDScan.net data breach

Canada’s Privacy Commissioner, Philippe Dufresne, has launched an investigation into a massive cyber breach at IDScan.net. The incident potentially exposed the personal information of millions of individuals across North America, including digital scans of driver’s licences and other government-issued identification.

IDScan.net is an online platform used by various businesses, such as hospitality, nightlife, and car rental companies, to verify customer identities. The company reported that an unauthorized third party may have accessed or copied customer information stored in its cloud accounts. In response, IDScan.net has begun notifying affected individuals and offering free credit monitoring services.

The scale of the breach is described by cybersecurity researchers as unprecedented. The FBI has also confirmed it is investigating the theft of tens of millions of driver’s licences from the U.S. and Canada that were reportedly being sold on the dark web. The Canadian investigation will specifically examine whether IDScan.net’s security safeguards were adequate and if the company complied with the Personal Information Protection and Electronic Documents Act (PIPEDA).