IDScan offers free monitoring after data breach

IDScan.net has announced it will provide free credit monitoring and identity protection services to customers affected by a recent data security incident. The move comes shortly after reports linked the company to a dark web marketplace that was selling millions of scanned driver's licenses.

The platform stated that an unauthorized third party accessed and copied customer information stored in its cloud systems. The compromised data reportedly included full names and numbers from government-issued identification documents. While the company is cooperating with federal law enforcement, it has not officially confirmed the connection between its internal breach and the external marketplace.

Link to dark web marketplace

The timing of the announcement raises questions about the source of the documents sold online. Last week, security researcher Brian Krebs reported that a dark web entity named Nexus was selling scans of over 153 million US and Canadian driver's licenses. Krebs cited IDScan as a potential source for this data, although the marketplace reportedly shut down ahead of an FBI investigation.

IDScan.net has not publicly acknowledged this specific link. The company confirmed that accessing the stolen information likely required payment, suggesting a targeted theft rather than a random dump. However, the firm is now contacting potentially impacted individuals to offer remedial services as part of its response to the incident.

Scope of the data breach

According to the company, the unauthorized access involved specific customer account data within its cloud infrastructure. The types of records mentioned include full names and driver's license or other government-issued identification numbers. This combination of data is highly sensitive because it allows for the creation of convincing fraudulent identities.

The firm emphasizes that it is working with federal law enforcement to address the situation. By offering free monitoring, IDScan aims to mitigate the risk for users whose personal details may have been exfiltrated. This action serves as a direct response to the security failure, though the long-term implications for user trust remain uncertain.

Unresolved questions remain

Engadget has reached out to IDScan.net for further comment on the report by Krebs and the possible connection to the Nexus marketplace. As of now, the company has not provided a detailed statement clarifying the extent of the overlap between its internal breach and the external sales of identity documents.

The situation highlights the complex nature of data breaches in the digital age. While IDScan is taking steps to protect its customers, the lack of a clear public confirmation regarding the source of the leaked data leaves some questions unanswered. Users are advised to remain vigilant and monitor their accounts for any unusual activity.