Canada privacy commissioner investigates massive driver’s licence hack

The Office of the Privacy Commissioner of Canada (OPC) is investigating a massive data breach that reportedly exposed the driver’s licence information of millions of individuals across North America.

The OPC stated it is engaged with the affected company to determine the extent of the breach and ensure compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA). Under PIPEDA, organizations must report security breaches that pose a real risk of significant harm, such as identity theft or financial loss.

While law enforcement has not officially named the company, reports suggest the target may be IDScan.net. Cybersecurity journalist Brian Krebs reported finding digital scans of millions of driver’s licences from the U.S. and Canada being sold on the dark web. The RCMP is currently monitoring the situation and collaborating with international law enforcement and cybersecurity partners.