IDScan.net Data Breach Exposes Government IDs, Biometrics in Oregon
IDScan.net reported a data breach in Oregon, affecting individuals whose sensitive identity information was held by the company. The incident exposed full names, government ID numbers, and biometric data, which can lead to significant identity theft risks. If you received a notification, understanding its legal implications is crucial for protecting your rights.
Received a IDScan.net notification letter? Find out in minutes if you qualify for compensation.
Free case review- State
- Oregon
- Breach date
- April 1, 2026
- Reported
- September 18, 2026
What may have been exposed
- Full Name
- Date of Birth
- Mailing Address
- Government ID Number
- Driver's License Number
- Scanned Identification Document Images
- Biometric Metadata
- Email Address
- Phone Number
IDScan.net, a company specializing in identity verification and scanning government-issued documents, reported a data security incident to the Oregon Attorney General on September 18, 2026. Given IDScan.net's role in handling highly sensitive credentials, any compromise of their systems is concerning for individuals whose information they process.
The exposed data types include Full Name, Date of Birth, Mailing Address, Government ID Number, Driver's License Number, Scanned Identification Document Images, Biometric Metadata, Email Address, and Phone Number. These details, especially government ID numbers and scanned documents, are extremely valuable to cybercriminals and can be used for sophisticated identity fraud that is difficult to detect or remedy.
Companies like IDScan.net have a legal responsibility to protect the sensitive personal information they collect and store. This includes implementing robust cybersecurity measures like encryption and access controls to prevent unauthorized access. The occurrence of a breach involving such critical data suggests that these safeguards may have been insufficient, potentially failing to meet legal obligations under Oregon state laws and federal standards.
If you have received a data breach notification letter from IDScan.net, it means your personal information was compromised. This letter serves as formal notice and can provide the basis for understanding your legal rights and potential recourse. It is important to know that you do not necessarily need to have suffered direct financial losses yet to have a claim, as the mere exposure of sensitive data can constitute harm under consumer protection laws.
Understanding the specifics of your notification letter and how it relates to official filings is essential. Our firm is currently investigating the IDScan.net data breach to help affected individuals understand their legal standing. We invite you to contact us for a free case review to discuss your situation and explore your options.
Received the IDScan.net notification letter? The IDScan.net case file tracks this filing.
What to do if you were affected
Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.
Replace exposed ID documents
Contact your state DMV or the issuing agency about replacing an exposed driver's license, passport, or government ID number.
Secure your online accounts
Change the password on any account that reused an exposed password and turn on two-factor authentication wherever it's offered.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Source: Oregon Attorney General filing
Related data breach cases
- Sheppard, Mullin, Richter & Hampton LLP
- Midvale Indemnity Company
- Poppins Payroll Company
- Lamb Weston Holdings, Inc.
- City of McMinnville
- Upbound Group, Inc.
- OneMain Financial
- MedImpact Healthcare Systems, Inc.
- Call-On-Doc, Inc.
- Ridgeway Pharmacy Ltd
- Kaniksu Community Health
- Craneware, Inc.
- See's Candies - Corporate Office
- zHealth, Inc.