Another massive data breach is putting a spotlight on just how much personal information companies collect — and what can happen when that information falls into the wrong hands.
According to cybersecurity news site KrebsOnSecurity, a dark-web identity theft service called Nexus claimed to have more than 153 million driver's license scans belonging to people in the United States and Canada, along with millions of other identification documents.
KrebsOnSecurity traced some of the records to IDScan.net, a Louisiana-based identity verification company. IDScan.net later confirmed in a Sept. 4 security notice that an unauthorized third party may have accessed or copied certain customer information stored in accounts on its cloud platform, potentially including full names and driver's license or other government-issued identification numbers.
IDScan.net has not said that all of the more than 153 million driver's license scans claimed by Nexus came from its systems. The company said its investigation is ongoing and that it is cooperating with federal law enforcement.
What A Data Breach Means For You
When a company that holds your personal information is breached, there may be little you could have done to prevent the initial exposure.
What you can control is how closely you watch for signs that your information has been compromised, how quickly you recognize suspicious activity and what steps you take if someone tries to misuse your identity.
That's where services such as Aura can add another layer of protection. Its platform combines identity and credit monitoring with tools designed to help protect online accounts, devices and personal information.
Aura's identity protection tools can monitor for compromised online accounts and personal information appearing on the dark web, along with potential signs of identity and financial fraud. Members can receive alerts when potentially suspicious activity is detected.
No identity protection service can stop an outside company from experiencing a data breach or guarantee that identity theft will never happen. But monitoring can help make it easier to spot warning signs and respond if stolen information is later misused.
Why Stolen ID Information Matters
Government-issued identification can contain information that may be useful to someone attempting identity theft, including a person's name, address, date of birth and identification number.
In its reporting on the Nexus service, KrebsOnSecurity noted that driver's licenses are commonly used as proof of identity when opening new lines of credit. Security researchers interviewed for the report raised concerns that access to detailed license scans could make some forms of identity fraud easier.
The Federal Trade Commission recommends considering a credit freeze to make it harder for someone to open a new credit account in your name. Credit freezes are free to place or lift, don't affect your credit score and remain in place until you remove them.
To place a freeze, you'll need to contact each of the three major credit bureaus: Equifax, Experian and TransUnion. The FTC also recommends regularly reviewing your credit reports; accounts you don't recognize could be a sign of identity theft.
One challenge with a data breach is that the potential risk doesn't necessarily disappear when the breach itself leaves the headlines. Personal information obtained in one incident can remain exposed and potentially be misused later.
Aura can monitor multiple places where suspicious activity may surface, including three-bureau credit monitoring across Experian, Equifax and TransUnion, compromised online accounts and personal information appearing on the dark web.
Its identity protection tools can also monitor for signs that a member's Social Security number is being used by someone else, new or changed bank accounts associated with a member's identity and suspicious activity involving linked financial accounts.
Members receive alerts when potentially suspicious activity is detected, allowing them to review what's happening and determine whether additional action is necessary.
Monitoring is only one part of protecting your information online.
Aura also offers privacy and security tools designed to help reduce some of the account vulnerabilities and personal information exposure that can leave people more susceptible to scams, fraud and identity theft.
Available tools can:
These tools can't prevent another company from suffering a breach. Instead, they're designed to help users reduce other points of exposure, strengthen account security and monitor for problems involving their personal information.
What If Someone Does Steal Your Identity?
If suspicious activity does turn into identity theft or fraud, acting quickly can help limit the damage.
A good place to start is IdentityTheft.gov, the federal government's identity theft recovery resource. It can walk you through steps such as contacting companies where fraud occurred, changing affected passwords, reviewing your credit reports and placing a fraud alert. You can also report the theft and get a personalized recovery plan based on what happened.
Aura also offers recovery assistance for members who experience identity theft or fraud, including 24/7 U.S.-based customer support and fraud resolution specialists who can help members develop an action plan, communicate with financial institutions and navigate the recovery process.
Aura plans also include up to $1 million in identity theft insurance for each covered adult for eligible losses and expenses. Coverage is subject to policy terms, conditions, exclusions and availability.
Take Control Of What You Can
The latest reported exposure highlights an uncomfortable reality of modern life: Personal information can be compromised even when you did nothing obviously risky yourself.
You can't control the security practices of every company that collects or stores your information. But federal guidance recommends steps such as reviewing your credit reports, considering a credit freeze and acting quickly if you notice signs of identity theft.
For people who want ongoing monitoring and additional online safety tools, Aura combines identity and credit monitoring, dark web monitoring, privacy tools, password and device security features and fraud recovery support in one platform.
Learn more about Aura and its identity protection tools.
Sign up for free local newsletters and alerts for the
Across America Patch
Patch.com is the nationwide leader in hyperlocal news.
Visit Patch.com to find your town today.