IDScan.net Allegedly Exposed 153 Million Licenses

The Office of the Privacy Commissioner of Canada has launched an investigation into the massive data breach.

Updated on Sept. 28, 2026 in Cybersecurity

Isometric editorial illustration of a dense array of modular server racks in deep teal and slate blue, representing large-scale data storage.
The Office of the Privacy Commissioner of Canada has opened an investigation into IDScan.net following an alleged data breach exposing 153 million identity records. AI Illustration. Upload story photo >

Live Poll

Do you trust private companies to adequately protect your sensitive personal identification data?

IDScan.net has allegedly exposed the personal information of 153 million individuals across Canada and the United States. Following the reports, the Office of the Privacy Commissioner of Canada initiated a formal probe into the incident.

Why it matters

The breach highlights systemic vulnerabilities in the handling of sensitive identification data by third-party verification firms. This investigation aims to determine the extent of the exposure and potential regulatory failures.

The incident involved the alleged exposure of 153 million driver's licences. IDScan.net has provided a manual inquiry process for individuals to determine if their specific information was compromised.

The players

IDScan.net

This is a technology company that provides identity verification and scanning solutions for businesses.

Office of the Privacy Commissioner of Canada

This is the federal government agency responsible for overseeing and enforcing compliance with Canada's privacy laws.

The details

IDScan.net is currently managing the fallout by allowing individuals to submit an online inquiry form to request a records review. The company is processing these requests manually to confirm whether user information was included in the alleged exposure.

Timeline

  1. September 28, 2026: The reports regarding the alleged data breach were published.

The Tech Race

This incident highlights the escalating challenge of securing biometric and identification data against modern cyber threats. As verification platforms proliferate, this case underscores the industry-wide struggle to maintain rigorous protocols against the rapid evolution of digital data harvesting.

Individuals concerned about the security of their personal documentation can visit the IDScan.net website to submit an inquiry form for a manual records check. While the process is manual, it provides a necessary step for those looking to verify if their license data was part of the reported exposure.

The takeaway

Maintaining vigilance over digital identity is essential given the potential for large-scale exposure through third-party services. Affected individuals should monitor their accounts for suspicious activity and consider identity protection services if their data is confirmed as compromised.

Further reading

For more information on how data breaches are mitigated and monitored, visit our Cybersecurity section.

Live Poll

Do you trust private companies to adequately protect your sensitive personal identification data?