Friday Security Briefing: This Week's Biggest Breach Hit 153 Million People
Before you close your laptop and head into the weekend — stop. Read this first. This week delivered one of the most significant data breach stories of 2026, and if your employees use any kind of identity verification tool, your business may be affected.
🔴 This Week's Threat: The IDScan Breach
The identity verification service IDScan.net suffered a catastrophic breach — and the damage is staggering. According to reporting by TechCrunch (September 2, 2026) and Techdirt, hackers maintained a live feed of every ID the company scanned — for over a year — before detection.
The result? More than 153 million driver's license scans are now circulating for sale. These are not just names and emails. We're talking full government-issued ID images — the kind fraudsters use to open bank accounts, apply for credit, and impersonate employees at your business.
And that's not all. Separately, hardware wallet company Trezor confirmed on September 4, 2026 that a breach through their fulfillment partner ShipMonk exposed an additional 67,000 U.S. customer records (CybersecurityNews, 2026). Names, shipping addresses, and order histories — now out in the open.
📊 The Numbers You Need to Know
- 153 million — driver's license scans exposed in the IDScan breach (Techdirt / Boingboing, September 3, 2026)
- 1 year+ — estimated duration hackers had real-time access to IDScan's live data stream before being caught
- 67,000 — additional U.S. customer records newly confirmed in the Trezor/ShipMonk vendor breach (CybersecurityNews, September 4, 2026)
- $0 — the cost for criminals to buy stolen ID data in bulk on dark web marketplaces right now
- 82% of small business breaches in 2025 began with compromised employee credentials — and ID-based social engineering is the #1 entry point (Verizon DBIR 2025)
Here's what most headlines miss: IDScan's clients include retailers, bars, hotels, and online services. If your business ever used an age-verification or identity-check tool in the past two years, there is a real possibility your customers' ID data passed through a compromised pipeline. This isn't hypothetical. It's happening right now.
✅ What To Do Before Monday
You have 48 hours before the work week starts. Here's your one immediate action and a short checklist to protect your team:
- Immediate action: Email your team today — tell them to freeze their credit with all three bureaus (Equifax, Experian, TransUnion). It's free, takes 10 minutes, and blocks fraudsters from opening new accounts in their name. If 153 million IDs are floating online, assume your people are affected.
- Audit your vendors: Make a list of any third-party tools your business uses for identity verification, age checks, or KYC. If any vendor hasn't sent you a security update this week, send them an inquiry email today.
- Check for reused passwords: Breached ID data is cross-referenced with leaked passwords. Ask your team to change any password that is used across multiple accounts — especially work email and financial tools.
- Enable MFA everywhere: Multi-factor authentication stops the vast majority of credential-based attacks. If your business tools don't have it enabled, that's your Monday morning priority.
Every time I run a training session with business owners, at least one person in the room tells me their company "doesn't have anything worth stealing." Friends, 153 million driver's licenses say otherwise. Criminals don't target you because you're valuable — they target you because you're easy. Training your team changes that equation.
Katrina, Wealth Horizons Academy Security Advisor