170 MILLION STOLEN IDS
Your phone buzzes late at night. A bank you never used just opened an account. Your name is on it. Your address is on it. Your birthday matches too. You never filled out a form. You never clicked a link. A thief had your driver's license scan. IDScan, the firm that stored it, got robbed. By the end you will know the one check.
IDScan lost 170 million ID files. Your license may be one of them. Hold that number in your head.
No alarm went off. No door was forced open. A thief ran a quiet pipe into IDScan's server. That pipe ran for over a year.
Researchers watched the count grow. It rose by 400,000 in 1 day. The leak was still live.
You sent a photo of your driver's license to prove who you are. IDScan stored that photo on its cloud. A thief copied IDScan's server. Your license now sits in a stranger's folder.
So what did that folder hold? The answer is worse than most breaches get.
On September 1, 2026, IDScan got the first warning. The stolen files were already on sale. IDScan confirmed the breach on September 8, 2026. The FBI inquiry is still open.
IDScan put out a statement. A third party got in, it said. Files were copied from its cloud.
One driver's license scan holds a lot. Your full name and home address are in it. Your birthday and your photo are in it. That is the kit to open a card in your name.
The breach held 153 million driver's licenses. It also held 579,000 medical cards. That is not a password list.
If this helps, a like and a subscribe help us keep it coming.
You have heard the word breach before. This one is different. A stolen password locks one door.
A stolen password takes 1 day to fix. A stolen license takes 400 days to clean up. That gap is the whole story. Your face is not a password. Your license is not a card.
The breach also held 10 million ID cards. Add 3 million travel files too. Every type of proof you own was in there.
One stolen license does not open one door. IDScan's files go to banks, landlords, and online stores. Each one trusts the same scan as proof.
Clean up takes months, per AARP. Credit freezes and fraud forms pile up. Your name keeps showing up in new places.
Biometric Update broke this story first. Reporter Joel McConvey named IDScan by name. The breach date was September 1, 2026. Every figure here comes from that report.
Here is the turn. ID checks were meant to keep fakes out. But IDScan stored the real scans in one place. A thief copied that one place. Now the real scan is the fake.
So what can you do right now? One check takes under 2 minutes.
Here is the method for tonight. Find the firm's data retention policy before you upload. Look for how long the firm keeps your photo of your driver's license. No clear answer in 2 minutes is your answer.
A stolen password has one lock. You reset it and the door closes. A stolen license has no reset. The IDScan breach proves that gap is real.
You send a photo of your driver's license to a bank or a landlord. That bank sends the photo to IDScan for a check. IDScan stores the photo on its cloud. A thief copies IDScan's cloud and sells your photo.
The CaraComp write up on this breach goes deeper on what to do. It covers the clean up steps in plain words. Find it at caracomp.com.
Cybersecurity reporter Brian Krebs watched the dark web sale. New records kept arriving in near real time. The breach was not a one time dump.
Three things to do this week. Ask IDScan or your bank how long they keep your photo of your driver's license. Place a credit freeze at all 3 bureaus. Watch for new account alerts you did not start.
The breach also held 579,000 medical cards. A medical card leak can run for years. IDScan offers free credit checks for those hit.
170 million files, one broken promise. IDScan promised to guard your scan. A stolen license follows you for years.
Go to the firm's site before you upload. Find the words data retention or delete in their policy. No delete date on the page means no delete date on your file. Close the tab and walk away.
No delete date means no delete. A stolen license follows you for years. Ask before you upload.
Every day we take one story like this and make it simple. Subscribe and tap the bell. Tomorrow's is free too. See you in today's briefing.
