IDScan.net data breach

Clerk's notes

IDScan.net, a company specializing in identity verification and document parsing, reported a data breach originating on April 1, 2026. This security incident was formally filed with Oregon state authorities on September 18, 2026. The report indicates an unauthorized compromise of its systems, which process and archive significant volumes of personal information related to identity verification.

The exposed data categories include Full Name, Date of Birth, Mailing Address, Government ID Number, Driver's License Number, Scanned Identification Document Images, Biometric Metadata, Email Address, and Phone Number. Due to IDScan.net's role in handling official identification documents, this combination of data is considered particularly sensitive and carries substantial risk for affected individuals.

Such extensive identity details, including government ID numbers and images of official documents, are uniquely valuable to cybercriminals. This information can be used for sophisticated identity theft, the creation of synthetic identities, opening fraudulent accounts, or bypassing security protocols. Unlike passwords or credit card numbers, government IDs and biometric data cannot be easily changed or reset, making the consequences of their exposure long-lasting.

Companies like IDScan.net are entrusted with implementing robust cybersecurity measures to safeguard the sensitive data they collect and store. The occurrence of this breach suggests that these protective measures may have been insufficient or compromised. Oregon law, along with federal regulations, mandates that companies maintain reasonable security protocols to prevent unauthorized access to personal information.

If you received a data breach notification letter from IDScan.net, it signifies that your private information was likely exposed. Receiving such a notice establishes your standing to seek a review of your situation. Our firm is currently monitoring this breach and offers a free case review for individuals who have been affected.

If a notification letter about this breach reached you, see every Oregon data breach on file or browse all cases.