ID verification giant IDScan has confirmed a massive data breach, with over 150 million driver’s licenses stolen from its cloud systems. The company, based in Louisiana, provides identity verification services to a range of businesses, from entertainment venues to cannabis dispensaries. The stolen data includes full names, driver’s license numbers, and identity numbers from other government-issued documents, such as passports. Independent cybersecurity journalist Brian Krebs reported that a database allowed anyone to search the stolen driver’s license information, including the U.S. Secretary of Defense. IDScan is currently investigating the incident, stating that payment was required to access the full cache of stolen data. The company has notified potentially affected individuals and is advising them to take necessary precautions.

According to the company, the breach was discovered on or around September 1, the same day Krebs first reported the issue. Krebs verified the authenticity of the data by examining his own record, and the database also contained data for high-profile individuals, such as a security researcher who verified his data for Krebs’ report. The Pentagon and the FBI are also investigating the incident. IDScan has not revealed the number of individuals affected, but it holds over 150 million driver’s license records.

The breach highlights the ongoing risks of data security in the digital age, with companies like IDScan, which handle sensitive personal information, being prime targets for cybercriminals. As the number of data breaches continues to rise, individuals and businesses must remain vigilant and take proactive measures to protect their personal data.