Legal Fallout Grows After Alleged Breach of 153 Million Driver's Licenses

IDScan.net, a US-based identity verification company, is facing at least four class-action lawsuits in the US District Court for the Eastern District of Louisiana following reports of a potential mega-breach involving driver's licenses and other identification documents. The FBI is investigating the incident, which was first reported by journalist Brian Krebs after a service called 'Nexus' on a Russian cybercrime forum claimed to have over 153 million driver's licenses, mostly belonging to American and Canadian drivers, along with more than 10 million other identity documents including ID cards, travel documents and medical cards.

IDScan.net provides business-to-business identity verification services to major companies including Hertz, FedEx, and numerous cannabis dispensaries across the US. The plaintiffs in the lawsuits are seeking damages and want the company to strengthen its internal security practices. Security expert John Strand of Black Hills Information Security noted the scale of the alleged breach and suggested that large collections of personal identification data may need protections similar to those given to health information under HIPAA.

Law firms including Hall Attorneys and Markovits, Stock & DeMarco are actively investigating claims from individuals who may have had their identification scanned or verified through IDScan.net's systems, including customers of rental car companies and cannabis dispensaries.