IDScan sued over alleged data breach affecting 153 million drivers

{"heading_1":"Background on IDScan and the Breach","subheading_1":"IDScan's Role","content_1":"IDScan is an identity verification technology company that provides hardware and software solutions for businesses to scan, authenticate, and extract information from government-issued identity documents. Its systems are used across the U.S. in various sectors including car rental firms, retailers, financial institutions, cannabis dispensaries, and hospitality establishments.","subheading_2":"The Alleged Breach","content_2":"The breach allegedly involved hackers offering to sell more than 153 million driver's licenses and other sensitive information on the dark web. The hacker service Nexus advertised access to these documents.","subheading_3":"Investigations and Legal Actions","content_3":"Several law firms, including Markovits, Stock & DeMarco, and Hall Attorneys, have launched investigations into potential class-action litigation related to the reported security incident at IDScan. The FBI's New Orleans office has also launched an investigation into the incident.","subheading_4":"Impact and Potential Legal Actions","content_4":"IDScan has not published any statements about these allegations and did not respond to BleepingComputer's requests for comments. Multiple lawsuits have been filed against IDScan, including potential class-action cases. State attorneys general and federal regulators could launch separate investigations or enforcement actions, as seen in similar-scale data exposures in the recent past, such as for 23andMe, Marriott, and Equifax."}