VeriScan Cloud retains all ID scans indefinitely unless the customer changes the setting
Assessment
IDScan.net's own documentation states "By default, new accounts are set to 'Collect all'", where "Attachments refers to high-resolution scans of the front and back of the ID", and "The default setting for new customers is to retain all records in our secure cloud." For the Basic plan, both settings are marked "cannot be changed." ThreatPaper confirmed identical text in Internet Archive snapshots of 20 January 2025, 9 March 2026 and 2 September 2026, the last of which post-dates the breach. This is the vendor's statement of its own design, not an inference.
Where this claim appeared
IDScan.net Support · 2025-01-20
https://support.idscan.net/veriscan-cloud-portal/data-collection-and-retentionWhat “Verified” means
Established by primary sources — the original disclosure, a vendor incident report, a court filing, a government advisory, or the affected party itself. Where a claim is material, at least two independent sources agree.
5 of 5 · rating scale
Assessed in
IDScan.net Breach: 153 Million Driver's Licence Scans and the Default Setting That Kept ThemThink this assessment is wrong? Report an error.