IDScan-net Hit With 19 Class-Action Lawsuits Over Breach Leaking Up To 150M Driver's Licenses

Identity verification provider IDScan-net is facing 19 separate class-action lawsuits following a prolonged data breach that exposed sensitive personal information. The breach reportedly leaked as many as 150 million U.S. and Canadian driver's licenses, travel documents, and medical cards to the dark web service Nexus. The company acknowledged that an unauthorized third party infiltrated its servers between April and September, compromising names, birth dates, contact details, and government-issued ID numbers. Plaintiffs accuse the software firm of negligence and FTC violations, specifically citing a failure to implement basic encryption or delete sensitive data when it was no longer required for verification. IDScan-net provides verification technology for major corporate clients across retail, travel, and hospitality, including Target, Hertz, and Caesars Entertainment. "Due to Defendants’ negligent failure to secure and protect Plaintiff’s and Class Members’ Private Information, cybercriminals have stolen and obtained everything they need to commit identity theft and wreak havoc on the financial and personal lives of thousands of individuals," one lawsuit stated.