IDScan.net Data Breach Exposes Sensitive Identity Information

IDScan.net, a company specializing in identity verification services, has reported a data breach to the Oregon Attorney General on September 18, 2026, confirming that personal information was compromised. The breach, which occurred on April 1, 2026, involves highly sensitive identity data entrusted to the company for verification purposes.

The compromised information includes your Full Name, Date of Birth, Mailing Address, Government ID Number, Driver's License Number, Scanned Identification Document Images, Biometric Metadata, Email Address, and Phone Number. This combination of data is particularly dangerous, as government IDs and biometric information cannot be easily changed, making victims vulnerable to sophisticated identity theft, synthetic identity creation, and financial fraud for years.

As a company that processes and stores critical identity verification data, IDScan.net had a legal obligation to protect this information with robust security measures. The occurrence of such a comprehensive data breach raises serious questions about the adequacy of their safeguards and whether sufficient encryption and monitoring protocols were in place to prevent unauthorized access.

If you received a data breach notification letter from IDScan.net, it means your private information was likely exposed due to this incident. Receiving this notification gives you legal standing to seek recourse. We encourage you to carefully review the letter for specific details, but be aware that the recommendations provided by the company might not fully address the long-term risks you now face.

Our legal team is currently investigating the IDScan.net data breach to determine the full extent of the harm to victims. If your personal information was exposed, you may be entitled to compensation for the risks and damages incurred. We offer free, no-obligation case reviews to help you understand your rights and potential next steps, with no upfront costs to you.