IDScan.net said an unauthorized third party accessed part of its cloud environment between April 4 and September 2, 2026, limited to the VeriScan platform, potentially involving names, contact details, birth dates and government ID numbers such as driver's licenses and passports [1]. According to eSecurity Planet, a Texas breach listing dated September 21 reports 13 million people affected, and Canada's Privacy Commissioner opened an investigation the same day [3][2]. Potentially affected people should enroll in the free credit monitoring and identity protection services IDScan.net offers and watch account statements for suspicious activity [1].
Identity verification firm IDScan.net's VeriScan cloud breached for nearly five months; Texas filing lists 13 million people affected
1 min read
- Disclosed
- Sep 4, 2026
- Occurred
- Apr 4, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- Scale
- 13,000,000 people[3]
- CVSS basis
- Our assessment
- Technology
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Technology, Hospitality & food service
What to do nowOur advice
- Enroll in the free credit monitoring and identity protection services IDScan.net offers [1].
- Watch account statements for suspicious activity and be careful sharing personal data .
Timeline
Technical details
Remediation
Vendor guidance
- 1Enroll in credit monitoring mitigate[1]
Enroll in the free credit monitoring and identity protection offered.
References
Official / primary2
- [1]
“Based on the investigation conducted to date, IDScan.net determined that an unauthorized third party gained access to a portion of our cloud environment between April 4, 2026, and September 2, 2026.”
- [2]Office of the Privacy Commissioner of Canada
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.