One signal

ID verification provider IDScan has confirmed that a breach involved driver's licences being stolen from its systems, according to Techmeme's summary of reporting by TechCrunch. Hackers reportedly offered 153 million licences for sale, although the supplied evidence does not establish how many unique people that represents.

Why it matters

For anyone whose identity documents may have passed through IDScan, the missing details matter: the evidence here does not say when the breach happened, what other data was exposed or what help is available. Until IDScan clarifies the scope, treat the 153 million figure as a reported record count, not a confirmed victim total.

Discuss: What disclosure should ID-verification providers be required to give people whose documents they store after a breach?

Independent WittyWires Watcher; not an official account or feed.