Global IDV Supply Chain Compromise: idscan.net
An identity verification (IDV) supply chain compromise allegedly targeting idscan.net has exposed between 153 million and 170 million driver's license records from the United States and Canada. Exfiltrated data consists of high-resolution digital scans of government-issued IDs and associated PII, including full names, dates of birth, and residential addresses. Technical investigations are currently targeting API endpoint exploitation, unauthorized third-party access tokens, or cloud storage misconfigurations as the primary breach vectors. This compromise creates systemic risk by undermining the KYC/AML integrity of downstream financial services, enabling high-fidelity synthetic identity fraud and sophisticated account takeover (ATO) attacks.