IDScan.net, a platform specializing in identity fraud protection, has announced it is providing complimentary credit monitoring and identity protection services to customers affected by a recent data breach. The company has not explicitly linked this security incident to a report from earlier this week that identified its data as a potential source for a dark web marketplace distributing scanned identification documents.
The timing of the announcement has led to speculation about the connection between the two events. IDScan.net stated that while an investigation remains active, it determined that an unauthorized third party may have accessed or copied certain customer information stored in its cloud infrastructure.
According to the company, the compromised data likely included full names and driver’s license or other government-issued identification numbers. IDScan.net noted that full access to this information required payment, but the company is currently contacting potentially impacted individuals and offering the free protective services as remediation. It also confirmed it is cooperating with federal law enforcement regarding the investigation.
Last week, journalist Brian Krebs reported on his blog, KrebsOnSecurity, that Nexus, a dark web marketplace, was selling scans of over 153 million US and Canadian driver’s licenses along with millions of other ID documents. Nexus reportedly shut down ahead of an FBI investigation, though Krebs cited IDScan.net as a possible origin for the stolen ID documents.
Engadget has reached out to IDScan.net for comment regarding the report and the potential link between its security incident and the Nexus marketplace.
Does this mean my data might be in that marketplace? Really hoping they reached out to me directly.
I hope the FBI tracks down whoever sold this access. It feels like the dark web just won.
Free credit monitoring is the least they can do. 153 million IDs is terrifying.