Sep 7, 2026 · 14 min
IDScan breach triggers lawsuits as new attacks target security tools
IDScan sued over 153 million licence breach, FalconFlank zero-day hijacks CrowdStrike, Magento stores backdoored with no patch
The episode connects a massive identity-data exposure with active attacks against security software, e-commerce stores, schools, and hacked accounts.
- 1The alleged IDScan breach involves attempted sale of more than 153 million driver’s license scans and ensuing lawsuits.
- 2A FalconFlank zero-day reportedly targets security software while an unpatched Magento flaw leaves online stores exposed.
- 3PaperCut attacks against schools and rising UK losses from hacked accounts show the wider cost of active cybercrime.
Don't miss
The episode’s sharpest escalation is the alleged attempted sale of more than 153 million driver’s license scans, followed by lawsuits and investigations.
The brief
David Shipley opens with the alleged IDScan breach, lawsuits, and investigations after reports that more than 153 million driver’s license scans were offered for sale.
The episode then widens from identity data to software risk, covering a FalconFlank zero-day aimed at security software and an unpatched Magento flaw affecting online stores.
Active PaperCut attacks against schools add a public-sector dimension, while rising reported losses from hacked accounts in the UK show how breaches become financial harm.
The central tension is speed: defenders face active exploitation and exposed data while organizations must respond before patches, investigations, or legal remedies catch up.