\n<\/p>\n
ID verification service IDScan has confirmed that a data breach involved the theft of driver\u2019s licenses from its systems, a week after a report said the identity document checker had been breached during a year-long hack<\/a>.<\/p>\n The company said in a website notice<\/a> that hackers stole the driver\u2019s licenses from the company\u2019s cloud; the stolen information includes people\u2019s full names and driver\u2019s license numbers, along with identity numbers from other government-issued documents, such as passports.<\/p>\n The Louisiana-based firm is used by corporate customers from entertainment venues to cannabis dispensaries to check and verify the identity documents of their customers. The notice is the company\u2019s first acknowledgement that it had been hacked. The company said last week that it was investigating an incident, but had not yet confirmed an intrusion.<\/p>\n IDScan said in its notice that it \u201creceived information\u201d on or around September 1 about a claim of a hack, on the same day that independent cybersecurity journalist Brian Krebs first reported<\/a> a data breach at IDScan.\u00a0<\/p>\n Krebs reported that he was alerted to a website on the dark web that allowed anyone to search the driver\u2019s license information of over 150 million people living in the United States and Canada, including accessing their photos. Krebs verified the authenticity of the data by examining his own record. The database also contained high-profile individuals, including the U.S. Secretary of Defense Pete Hegseth, and a security researcher who also verified his data for Krebs\u2019 report.<\/p>\n The Pentagon told TechCrunch last week<\/a> that it was aware of the suspected breach, and a spokesperson for the FBI said it was also investigating the incident.<\/p>\n IDScan said on its website its investigation was ongoing. The company\u2019s statement said that, \u201cthough full access to the information required payment\u201d \u2014 likely referring to a demand for money made by the hackers to access the full cache of stolen data \u2014 the company was providing notice on its website to notify potentially affected individuals. IDScan has not said how many individuals are affected but notes on its website<\/a> that it holds over 150 million driver\u2019s license records.<\/p>\n IDScan did not respond to TechCrunch\u2019s request for comment about the incident, such as whether the hackers contacted the company with a ransom demand not to release the data.<\/p>\n<\/div>\n When you purchase through links in our articles, we may earn a small commission<\/a>. This doesn\u2019t affect our editorial independence.<\/em><\/p>\n