IDScan.net Reports Data Breach to Oregon Regulators in 2026

IDScan.net, a company specializing in identity verification and document parsing technology, filed a data breach notification with the Oregon Attorney General on September 18, 2026. This official filing indicates that a security incident occurred on April 1, 2026, impacting individuals whose information was processed or stored by the company's systems. IDScan.net's services are designed to capture and authenticate government-issued identification cards, meaning their databases contain detailed personal information.

The reported exposed data categories include Full Name, Date of Birth, Mailing Address, Government ID Number, Driver's License Number, Scanned Identification Document Images, Biometric Metadata, Email Address, and Phone Number. These categories represent a comprehensive set of personal identifiers and physical documentation that could be highly valuable to malicious actors.

The exposure of such detailed identity credentials, particularly government ID numbers and raw image files of identification documents, presents elevated risks for affected individuals. Unlike easily changeable passwords, these pieces of information are fundamental to a person's identity and cannot be readily altered. This type of data can be leveraged to construct synthetic identities, bypass 'know-your-customer' protocols, execute targeted phishing campaigns, and facilitate long-term identity theft.

Individuals who receive a breach notification from IDScan.net should consider taking proactive steps to safeguard their personal information. It is advisable to closely monitor all financial accounts and credit reports for any suspicious or unauthorized activity. Additionally, individuals should remain vigilant against unsolicited communications, such as emails or phone calls, that may attempt to solicit further personal details or exploit the compromised information. Regularly reviewing statements and reports can help detect any potential misuse of your identity.