How many records were allegedly leaked in the IDScan.net breach?

153 million records were reportedly leaked and sold on the dark web following a breach of IDScan.net.

Why are driver's licences considered particularly sensitive in this breach?

Unlike a password, a licence number is tied to a physical document that's difficult and time-consuming to replace, and it's frequently used as a form of identity verification for things like opening bank accounts or picking up prescriptions.

What should I do if I think my driver's licence data was leaked?

You should check for breach notifications, monitor your credit reports, and watch for phishing attempts. Contacting relevant authorities may also be advisable.

Who might be affected by this breach beyond Ontario?

Because IDScan.net provides identity verification services used by businesses across North America, the scope of affected individuals could stretch far beyond a single province or country.

Canada Privacy Commissioner Probes IDScan.net Breach

What the IDScan.net Breach Allegedly Exposed

Ontario driver's licences are reportedly among 153 million records allegedly leaked and sold on the dark web following a breach of identity verification company IDScan.net. The company provides identity verification services used by businesses across North America, which means the scope of affected individuals could stretch far beyond a single province or country.

While the full technical details of how the breach occurred are still emerging, the sheer scale of the alleged leak, 153 million records, has drawn attention from privacy regulators and security researchers alike. If you want a deeper technical breakdown of how the breach reportedly unfolded, our earlier coverage of the 153 million driver's licenses leaked in the alleged IDScan breach walks through the details of the dark web marketplace where the data allegedly surfaced.

Why Canada's Privacy Commissioner Is Investigating

The privacy commissioner of Canada has launched a formal investigation into the data breach that allegedly exposed 153 million records, including Ontario driver's licences. A formal investigation from a national privacy regulator signals that Canadian authorities consider this incident serious enough to warrant official scrutiny, not just corporate damage control.

Driver's licences are a particularly sensitive category of identification. Unlike a password, a licence number is tied to a physical document that's difficult and time-consuming to replace. It's also frequently used as a form of identity verification for everything from opening bank accounts to picking up prescriptions, which makes it valuable to anyone attempting identity theft or fraud.

This isn't the first time driver's licence data has ended up at the center of a major breach investigation. A separate incident involving a leak that reportedly named a U.S. Defense Secretary among affected individuals shows how these breaches can ripple across borders and touch even high-profile figures. You can read more about that case in our report on the FBI probe into a driver's licence leak naming Hegseth.

Steps to Take If Your Driver's Licence Data Was Leaked

If you believe your information may have been part of this breach, or you're simply unsure and want to be cautious, there are concrete steps you can take right now:

Check for breach notifications. Watch for official communication from IDScan.net or any business you've interacted with that may use its verification services.
Monitor your credit reports. Set up alerts or freezes with major credit bureaus to catch any unauthorized accounts opened in your name.
Watch for phishing attempts. Criminals often follow up major breaches with targeted phishing emails or texts that reference real personal details to appear legitimate.
Contact your provincial licensing authority. In Ontario and other provinces, you may be able to flag your licence number as potentially compromised or request guidance on replacement.
Review your accounts for unusual activity. Pay close attention to financial institutions, government services, and any account where you used your driver's licence as identity verification.

For a more detailed, step-by-step checklist you can apply directly to this situation, our guide on what to do after the Florida DMV breach covers the practical actions to take when a government ID document has potentially been exposed.

Reducing Future Exposure When Submitting ID Documents Online

This breach is a reminder that every time you upload a scan of your driver's licence, whether to rent a car, verify your age, or open an account, that data lives somewhere on a company's servers, and you have little control over how securely it's stored. A few habits can reduce your exposure going forward: only share ID documents with services that clearly explain their data retention policies, ask whether a business truly needs a full scan versus a simple visual check, and periodically search your own name or licence number to see if it appears in known breach databases.

What This Means For You

If you live in Ontario or have used a service that relies on IDScan.net for identity verification, treat this as a prompt to protect your identity now rather than waiting for direct confirmation. Regulatory investigations can take time, and official notifications don't always reach everyone affected quickly. Taking a few precautionary steps today, like monitoring your credit and watching for phishing, costs little and could save you significant hassle later.

Key Takeaways

Ontario driver's licences are reportedly among 153 million records allegedly leaked in the IDScan.net breach.
Canada's privacy commissioner has opened a formal investigation into the incident.
Affected individuals should monitor credit reports, watch for phishing, and consider flagging their licence with provincial authorities.
Reducing future exposure means being selective about where and why you share scanned ID documents online.

Staying informed about breaches like this one, and acting quickly when your information may be involved, remains one of the most effective ways to protect your identity in an environment where personal data changes hands more often than most people realize.