What is confirmed
On 4 September IDScan said an unauthorised party may have accessed or copied data in customer cloud accounts, potentially including names and government ID numbers.
On 21 September Canada's privacy commissioner announced an investigation into the breach, mentioning digital scans of driving licences and other documents.
What it means
Public estimates mention more than 150 million documents. IDScan has not confirmed that figure in its notice; the number of affected people remains to be determined.
An ID copy can enable impersonation or targeted phishing. It does not establish that a specific account has already been opened in your name.
What to do
If you used an identity verification service, consult official notices from the provider and monitor your accounts for unusual activity.
Do not send your ID again to someone who calls about the breach. Verify their identity through an independent channel.
Use the related SecurCheck tool, then confirm important decisions with an official source.
