IDScan.net Rolls Out Credit Monitoring Following Cloud Security Incident

Identity verification platform IDScan.net is providing complimentary credit monitoring and identity protection services to affected customers following a recent security incident involving its cloud infrastructure.

The security disclosure comes as federal authorities examine illicit online data markets, as reported by Engadget.

In a statement concerning the incident, IDScan.net disclosed that an unauthorized external entity gained access to and potentially copied select client records maintained in the company's cloud systems.

The exposed records contain sensitive personal identifiers, including complete legal names along with driver's license numbers and other government-issued identification data.

IDScan.net noted that full retrieval of the records involved required payment, but confirmed it is actively notifying potentially impacted individuals to provide remediation services.

The disclosure follows a September 1 report by cybersecurity journalist Brian Krebs on his blog, KrebsOnSecurity, concerning an illicit digital storefront called Nexus.

According to Krebs's report, Nexus put up for sale more than 153 million driver's license scans originating from the United States and Canada, in addition to millions of supplementary identity records.

Nexus reportedly ceased operations ahead of an impending Federal Bureau of Investigation probe, with Krebs's reporting citing IDScan.net as a potential source for the exposed identity scans.

While IDScan.net has not publicly tied its cloud breach to the Nexus marketplace, the enterprise confirmed that it is fully cooperating with federal law enforcement officers in their ongoing investigation.