Did IDScan.net have a data breach?

In plain terms

IDScan.net reported a data breach to the Texas Attorney General on September 21, 2026, stemming from an incident on April 1, 2026. This security incident potentially exposed sensitive identity verification data for individuals, raising concerns about potential misuse of personal information.

IDScan.net, a provider of identity verification solutions, filed a data breach notification with the Texas Attorney General on September 21, 2026. The company indicated that a security incident occurred on April 1, 2026, leading to the exposure of personal data. The investigation into the full scope and impact of this breach is currently described as monitoring by the company.

The exposed data types, as reported in the official filing, include Full Name, Date of Birth, Government ID Number, Scanning Metadata, Residential Address, Biometric Verification Data, Email Address, and Phone Number. These categories of information are commonly handled by IDScan.net's systems for identity and age verification across various regulated industries.

The compromise of such detailed identity information presents significant risks for affected individuals. The combination of full names, government ID numbers, residential addresses, and biometric verification data could be used in various forms of identity-related fraud. This type of information is foundational to an individual's identity, making proactive steps important.

Individuals who receive a breach notification from IDScan.net should remain vigilant for unusual activity. It is advisable to review financial statements and credit reports regularly for any unauthorized accounts or transactions. Consider placing a fraud alert or credit freeze with major credit bureaus to help prevent new accounts from being opened in your name.

Additionally, be cautious of unsolicited communications via email, phone, or mail that ask for personal information. Fraudsters often use breach events as an opportunity for phishing or social engineering attempts. Always verify the legitimacy of any requests for personal data, especially if they claim to be from IDScan.net or other official entities.