CyberNew CyberNew
Threat Intelligence & APT The Record 3 weeks ago

Canadian regulator opens probe of IDScan for allegedly violating data privacy laws

CN
CyberNew Threat Research Desk
• Original Reporting: The Record
CyberNew Threat Intel Assessment
Assessed Severity: INFORMATIONAL
Impacted Surface
Cloud & Distributed Infrastructure
Intelligence Sector
Threat Intelligence & APT

Analyst Takeaway

"Image: Muhammed Ensar via Pexels Canadian regulator opens probe of IDScan for allegedly violating data privacy laws Privacy Commissioner of Canada Philippe Dufresne has launched a probe of IDScan.net in the wake of reports that a bad actor penetrated company databases to steal personal data and scans of 153 million people's drivers’ licenses. IDScan.net’s technology is widely used by industry —..."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
data
Image: Muhammed Ensar via Pexels

Canadian regulator opens probe of IDScan for allegedly violating data privacy laws

Privacy Commissioner of Canada Philippe Dufresne has launched a probe of IDScan.net in the wake of reports that a bad actor penetrated company databases to steal personal data and scans of 153 million people's drivers’ licenses.

IDScan.net’s technology is widely used by industry — particularly in the retail and hospitality sectors — to verify official IDs.

The investigation, announced Monday, will probe IDScan’s security practices and whether victim notifications were adequate under Canada’s federal private-sector privacy law, the regulator said in a press release.

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from The Record.

Primary Advisory →