IDScan sued over alleged data breach affecting 153 million drivers
Lawsuits target identity-verification firm IDScan after hackers allegedly exfiltrated 153 million driver's licences, spotlighting supply-chain risk for organisations that outsource document-based KYC.
Summary written by editorial AI · Source link below
Multiple lawsuits have been filed against identity verification company IDScan after hackers allegedly breached the service and offered to sell more than 153 million driver's licenses. [...]
Editorial Analysis
Framed for the Compliance & GRC desk
Lawsuits following the breach underscore the litigation exposure when a processor fails to safeguard personal data at scale—directly relevant to GDPR Article 28 obligations.
Verify that data-processing agreements with ID-verification vendors include enforceable breach-notification and indemnification clauses.
A single identity-verification vendor breach exposed 153 million records—underscoring the board-level need to govern third-party data-processing risk.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at BleepingComputer in a new tab.
More from the Security Desk
- Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted2d
- Your Employee’s Password Appeared in an Infostealer Log. Now What?4d
- US and Canadian court data exposed in Thomson Reuters breach4d
- Health data of more than 9.5 million people leaked from Aesto record system5d
- The Agentic SOC – From AI Theater to Real Defense1 Sept