The platform was linked to an FBI investigation into a dark web marketplace last week.
IDScan.net, an ID fraud protection platform, has announced it’s offering “free credit monitoring and identity protection services” as a make good for customers impacted by a recent data security incident. The company hasn’t publicly connected this breach to a report last week that its data was a possible source for a new dark web marketplace selling scans of IDs online. The timing of this announcement certainly raises the possibility, though.
“While the investigation is ongoing, IDScan.net has determined that an unauthorized third party may have accessed and/or copied certain customer information stored within their accounts on the IDScan.net cloud,” the company said. “The type of information contained within the affected data may have included full names and driver’s license or other government-issued identification numbers.”
According to IDScan.net, full access to the information “required payment,” but it’s still contacting people potentially impacted by the incident and providing free credit monitoring and identity protection services. The company also says it’s “cooperating with federal law enforcement on their investigation.”
Writing for his blog KrebsonSecurity on September 1, journalist Brian Krebs reported that Nexus, a dark web ID marketplace, was selling scans of over 153 million US and Canadian driver’s licenses and millions of other ID documents. Nexus reportedly shuttered ahead of an FBI investigation into the marketplace, but Krebs’ report cited IDScan as a possible source for the ID documents it was selling.
Engadget has asked IDScan.net to comment on the report and the possible connection between its security incident and Nexus. We’ll update this article if we hear back.
Credit: Source link
