IDScan.net Data Breach Exposes Names and ID Numbers, Legal Investigation Launched

IDScan.net, a technology company that provides identity verification and data capture services for businesses, discovered around September 1, 2026 that an unauthorized party may have accessed or copied customer information stored in its cloud accounts. The company has since secured its systems and engaged outside cybersecurity specialists, with the investigation still ongoing.

The exposed data may include full names along with driver's licence numbers or other government-issued identification numbers. Because this type of information can be used to impersonate victims or open fraudulent accounts, affected individuals face an increased risk of identity theft and fraud.

Following the breach, a US law firm, Edelson Lechtzin LLP, has announced it is investigating potential legal claims on behalf of impacted individuals. While this news centres on US consumers, it is a useful reminder for Australian businesses that rely on identity verification vendors to understand how those vendors handle and store sensitive identity data.