PrivacySignal
Breach

IDScan confirms breach after hackers offer 153 million driver’s license scans for sale

The Record · · International · Data Breaches

IDScan has confirmed a data breach after hackers reportedly put 153 million driver's license scans up for sale. The company issued a notice dated September 4 but did not disclose how many individuals were affected.

Why this matters: Driver's license scans are not just photos. They carry your name, address, date of birth, and a government ID number — enough to open accounts, commit fraud, or verify a fake identity. IDScan's product exists specifically to collect and store this data at scale, which makes a breach here much worse than a typical company getting hacked. The gap between 153 million records reportedly for sale and a notice that names no affected count is a real accountability problem. People whose data this company held deserve a straight answer about whether they are exposed.

Who should care: Cybersecurity · Privacy officers · Administrators

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Logged Is Not Authorized

Georgia law restricts police use of license plate data to law enforcement purposes. A new lawsuit alleges deputies searched a man's vehicle five times while he was suing their sheriff. Two recorded reasons were "info" and "37." The system accepted both.

· 6 min read Read →
Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

Breach
NPR — Tech · · International

AI found the flaw. Hackers found the leak: The race to save 'PHP2SHELL'

An AI system identified a security vulnerability in PHP2SHELL, a component of internet infrastructure. Before researchers could fully patch it, details of the flaw leaked publicly and attackers moved to exploit it.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

#breach#ai#security Read original →
Breach
BleepingComputer · · International

Abandoned Popcorn Time app exposed millions of devices to RCE attacks

Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw that could have allowed attackers to execute malicious code with elevated privileges on millions of computers. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
Microsoft Threat Intelligence · · International

Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks

Microsoft Threat Intelligence documented a supply chain attack embedded in LiteLLM version 1.107.0, a widely used Python library for AI model integrations. The malicious code used Python startup hooks to steal credentials and load remote code on affected systems.

Who should care: Cybersecurity · Privacy officers · Administrators

Breach
BleepingComputer · · International

Quest Diagnostics confirms data breach exposed patient records

Quest Diagnostics disclosed that a threat actor gained unauthorized access to its Quanum LSM system, exposing patient records. The clinical laboratory company confirmed the breach, though the full scope of affected individuals has not been detailed in available reporting.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

#breach#healthcare#security Read original →
Breach
The Record · · International

Quest Diagnostics warns of potential data theft after attack on lab service system

Quest Diagnostics has disclosed that a system used in its laboratory services may have been compromised, potentially exposing patient data. The nationwide diagnostics company has not confirmed the full scope of what was taken.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

#breach#healthcare Read original →
Breach
HIPAA Journal · · US Federal

Washington Gastroenterology Pays $4.6 Million to Settle Data Breach Lawsuit

Washington Gastroenterology has agreed to a $4.6 million settlement to resolve a class action lawsuit arising from a cybersecurity incident at the medical practice. The settlement follows litigation brought by patients affected by the breach.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals

#breach#enforcement#healthcare Read original →