EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Hacker News·Sep 4·5 min read
Hackers Had a Live Feed of Every ID Verification Company Scanned for over a Year
TL;DR
A significant data breach exposed over 153 million scans of driver's licenses from an ID verification company, highlighting the inherent risks of online identity verification. This incident underscores the reality that no age verification system can guarantee safety.
✦ Why It Matters
Evaluate your current identity verification processes to ensure they prioritize user privacy and security.
Key Takeaways
- Evaluate the security of identity verification providers before integration.
- Consider alternative methods for user verification that minimize data retention.
- Stay informed about data breach incidents to understand risks.
- Advocate for stronger data protection regulations in your organization.
Full Summary
A recent breach has revealed that hackers accessed a live feed of scanned driver’s licenses from IDScan.net, a company providing identity verification services to various businesses, including Hertz and FedEx. Over a year, more than 153 million scans were compromised, with new records continuously added even after the breach was disclosed.
The breach was traced back to a service on the dark web, where these IDs are being sold, including sensitive information from high-profile individuals. Security experts warn that such breaches pose severe risks, particularly for vulnerable populations, including those in witness protection programs.
This incident underscores the failure of current identity verification systems to protect sensitive data, despite claims of compliance with privacy laws like GDPR and CCPA.