BasedApp's leak of passports tied to wallets bolsters the case against HMRC's crypto record demands
BasedApp said a breach exposed passport numbers and home addresses linked to customer wallets, without saying how many of its 100,000-plus users were hit. The leak gives Recap a live example in its fight against HMRC's draft power to demand crypto records without tribunal approval.
Reality
- Evidence42
- Adoption
- Not scored
- Hype gap+28
- Incentives55
- Confidence45
Brian Krebs reports a hacker selling searchable access to 153 million US and Canadian licences, with suspicion pointing at the vendor IDScan.net. Any age gate built on a document scan owns that exposure.
Perspective Coverage
7 publishers
- Builder
- Builder 26%
- Operator
- Operator 56%
- Investor
- Investor 18%
Reality
- Evidence62
- Adoption66
- Hype gap+22
- Incentives50
- Confidence60
Every company that outsourced KYC document capture now owns an exposure it never inventoried, because the images being sold appear to come from the verifier rather than from any of its customers. The FBI opened the file in New Orleans.
Perspective Coverage
7 publishers
- Builder
- Builder 23%
- Operator
- Operator 49%
- Investor
- Investor 28%
Reality
- Evidence62
- Adoption65
- Hype gap+15
- Incentives55
- Confidence60
IDScan.net says an unauthorized third party may have accessed or copied full names and government-issued ID numbers from customer accounts on its cloud, after 153 million driver's licenses appeared for sale on a dark web site.
Perspective Coverage
5 publishers
- Builder
- Builder 17%
- Operator
- Operator 65%
- Investor
- Investor 18%
Reality
- Evidence68
- Adoption70
- Hype gap+28
- Incentives60
- Confidence64
The company says it learned on or around September 1 that data in customer accounts on its cloud may have been copied, and its notice lists names and ID numbers but not the licence scans Nexus was selling.
Perspective Coverage
6 publishers
- Builder
- Builder 17%
- Operator
- Operator 52%
- Investor
- Investor 31%
Reality
- Evidence74
- Adoption62
- Hype gap+14
- Incentives71
- Confidence70
Four class actions hit IDScan.net over the 153 million licences Krebs linked to it
The vendor runs more than 21 million document checks a month for clients including Hertz, GameStop and FedEx, and the plaintiffs suing in New Orleans infer their own exposure from a car rental because nobody has told them otherwise.
Reality
- Evidence46
- Adoption52
- Hype gap+18
- Incentives68
- Confidence44
IDScan.net is notifying people about names and ID numbers and offering credit monitoring, while the records Brian Krebs examined each carried infrared and ultraviolet captures, the layer that document authentication actually tests.
Perspective Coverage
4 publishers
- Builder
- Builder 22%
- Operator
- Operator 59%
- Investor
- Investor 19%
Reality
- Evidence82
- Adoption68
- Hype gap+12
- Incentives55
- Confidence76
Krebs traces infrared license captures on a dark web market to a vendor scanning 21 million IDs a month
The infrared and ultraviolet captures a bank reads to prove a license is genuine were reportedly on sale beside the ordinary scans, which leaves the cheapest step in account opening deciding nothing on its own.
Reality
- Evidence57
- Adoption62
- Hype gap+12
- Incentives72
- Confidence52
Krebs traced 153 million leaked driver's licence scans to a single Louisiana ID verifier
IDScan.net sells the compliance layer behind age and ID checks at thousands of dispensaries and at Hertz, and Techdirt notes its trust page stayed up for days after the dark web store opened. The FBI is now asking where the images came from.
Reality
- Evidence44
- Adoption66
- Hype gap+26
- Incentives71
- Confidence52