From the article:

“it appears to be siphoning images collected by a widely-used identity verification company based in Louisiana.”

Worth noting that 5 US states (e.g. Florida) have stopped issuing standard drivers licenses and effectively force their residents to obtain a “Real ID” which includes additional data -- which of course makes more sensitive data available to cybercriminals.

(edit) BTW, would be useful to have a free-world venue for posts just about data breaches. Proposal here.

Update: Source of the leak revealed

The IDScan verification giant got breached

A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are available for purchase on this service, it appears to be siphoning images collected by a widely-used identity verification company based in Louisiana. KrebsOnSecurity also has learned that the New Orleans field office of the Federal Bureau of Investigation (FBI) today launched an official inquiry into the source of the images.

cross-posted from: https://lemmy.world/post/51429798

🪪 The recent idscan.net (&more?) breach exposed over 153M Driver's Licenses + 10m IDs + 579k Medical Cards mostly from the US & Canada.

Age verification aka ID verification proponents should really think about how unsafe data is once it's collected en masse.

Citizens' Security & Privacy need to be prioritized and considered BEFORE implementing any form of verification for anything.

Are the Western courts in charge of protecting the people sleeping right now? 💤

cross-posted from: https://lemmy.world/post/51429798

🪪 The recent idscan.net (&more?) breach exposed over 153M Driver's Licenses + 10m IDs + 579k Medical Cards mostly from the US & Canada.

Age verification aka ID verification proponents should really think about how unsafe data is once it's collected en masse.

Citizens' Security & Privacy need to be prioritized and considered BEFORE implementing any form of verification for anything.

Are the Western courts in charge of protecting the people sleeping right now? 💤

🪪 The recent idscan.net (&more?) breach exposed over 153M Driver's Licenses + 10m IDs + 579k Medical Cards mostly from the US & Canada.

Age verification aka ID verification proponents should really think about how unsafe data is once it's collected en masse.

Citizens' Security & Privacy need to be prioritized and considered BEFORE implementing any form of verification for anything.

Are the Western courts in charge of protecting the people sleeping right now? 💤