IDScan.net says cloud breach may have exposed Canadian users’ ID data

IDScan.net says an unauthorized third party accessed part of its cloud environment and limited the incident to the VeriScan platform. The company is offering free credit monitoring and identity protection to potentially affected individuals in Canada while the investigation continues.

Why it matters: - The incident may involve personal information that could be used for fraud or identity theft. - Potentially affected people in Canada are being offered free credit monitoring and identity protection services. - IDScan.net says no misuse of personal information is known at this time.

What happened: - On or around Sept. 1, 2026, IDScan.net received information that certain data may have been accessed without authorization. - IDScan.net says an unauthorized third party accessed part of its cloud environment between April 4, 2026, and Sept. 2, 2026. - The company says the event was limited to the VeriScan platform. - IDScan.net says no other products or services were identified as involved. - The notice was issued Oct. 16, 2026.

The details: - The information potentially involved could include full name, contact information, date of birth, driver’s license, passport and/or other government-issued identification numbers. - IDScan.net says not every data type listed was necessarily involved for every individual. - The categories of information may vary depending on how a customer organization used the VeriScan platform. - The company says the data collected, processed or stored by customer organizations determined what may have been exposed. - IDScan.net says it immediately secured its systems after learning of the issue. - The company engaged third-party specialists to determine the scope of the incident. - The investigation is ongoing. - IDScan.net says it is cooperating with applicable regulatory and law enforcement authorities. - The company says it is reviewing and implementing further security enhancements.

Between the lines: - The mention of government ID data raises the risk level because that information can be harder to replace than a password or account number. - The company’s focus on the VeriScan platform suggests the exposure was contained, but the final scope is still not settled. - The notice is aimed at Canadian individuals, which signals cross-border privacy and credit-monitoring obligations tied to the incident. - The company’s advice to monitor statements and use caution online reflects concern about downstream misuse even without confirmed fraud.

What's next: - IDScan.net says the investigation will continue until the full nature and scope of the incident are determined. - Affected individuals can enroll in the free credit monitoring and identity protection services by calling 1-833-516-2980, Monday through Friday, 8 a.m. to 8 p.m. ET, excluding holidays. - Individuals can also write to 8814 Veterans Memorial Blvd, Suite 3-124, Metairie, LA 70003. - Canadian consumers can request credit reports from TransUnion and Equifax Canada. - Consumers may place a “Potential Fraud Warning” on their credit files with those bureaus; the warning remains for six years and any request to amend or remove it must be made in writing. - The notice points Canadians to the Commission d’accès à l’information du Québec, the Office of the Privacy Commissioner of Canada and the Canadian Anti-Fraud Centre for more information.

The bottom line: - IDScan.net is treating the incident as a limited cloud breach, but Canadian customers whose data moved through VeriScan are being urged to take credit and identity-protection steps now.