The platform was linked to an FBI investigation into a dark web marketplace last week.
IDScan.net, an identity fraud protection platform, announced that it is offering “free credit monitoring and identity protection services” as compensation for customers affected by a recent data security incident. The company has not publicly linked the breach to a report last week that its data was a possible source for a new dark web marketplace selling online identity analytics. However, the timing of this announcement certainly raises this possibility.
“While the investigation is ongoing, IDScan.net has determined that an unauthorized third party may have accessed and/or copied certain customer information stored in their accounts on the IDScan.net cloud,” the company said. “The type of information contained in the affected data may include full names and a driver’s license or other government-issued identification number.”
According to IDScan.net, full access to the information “required payment,” but it still involved contacting people potentially affected by the incident and providing free credit monitoring and identity protection services. The company also says it is “cooperating with federal law enforcement in their investigation.”
Write for your blog KrebsonSecurity On September 1, journalist Brian Krebs reported that Nexus, an identification marketplace on the dark web, was selling scans of more than 153 million U.S. and Canadian driver’s licenses and millions of other identity documents. Nexus reportedly closed before an FBI investigation into the market, but Krebs’ report cited IDScan as a possible source of the identity documents it sold.
Woozad asked IDScan.net for comment on the report and the possible connection between its security incident and Nexus. We will update this article if we receive a response.
