Identity Verification Vendor Breach Exposes 153M Driver's Licenses

Massive Third-Party Data Breach

Identity verification provider IDScan has confirmed a significant breach of its cloud platform, linked to a database containing over 153 million stolen driver's license scans. The company, which provides identity verification services to businesses across multiple industries, acknowledged that hackers accessed customer data stored in their systems. This breach underscores the cascading risk that comes with outsourcing identity verification and sensitive document processing to third-party vendors.

What SMBs Need to Know

For small and mid-sized businesses, this incident is a critical reminder that your security posture extends far beyond your own infrastructure. When you integrate identity verification, payment processing, or customer data management services, you're inheriting that vendor's security risks. Many SMBs assume compliance certifications guarantee security, but breaches like this prove otherwise. Now is the time to audit your vendor relationships: Do you know where your customer data lives? What access controls and encryption standards do your vendors enforce? Do you have contractual protections and incident response procedures in place? Third-party risk management isn't just for enterprises—it's essential for any business handling customer identity data.

Read the full story at BleepingComputer

Need help assessing your vendor security and third-party risk? O-Cyrus helps SMBs build practical security programs that address real-world threats like supply chain vulnerabilities. Contact our team or learn more about our security services.