You go to a dispensary, they scan your DL to prove you’re 21, and you probably never think about…
You go to a dispensary, they scan your DL to prove you’re 21, and you probably never think about that scan again. But where does the data actually go? A security researcher recently found an image of his DL in this massive apparent ID breach, and traced the scan back to a dispensary he’d visited. On Monday, dark web service Nexus was uncovered and it claims access to >153M US + Canadian DL records, many potentially including images of the actual IDs. Here’s the part most of us probably don’t realize: When a dispensary, rental car company, hotel or venue scans our ID, there’s likely a 3rd-party company underneath the transaction verifying, and potentially storing, our identity. And as age verification expands online, we’re being asked to prove who we are in even more places, which makes me ask: If a business only needs to know I’m over 18 or 21, why do they need to store my entire identity? Consumers: There’s no legit Nexus lookup right now, so beware of sites claiming they can check for you. Freeze your credit + monitor your accounts for fraud. Businesses, ask: Do we really need this data? How long are we keeping it? Who else has access? The safest identity data may be the data you never store. Shared my take this morning on iHeartRadio’s KFBK Morning News.
Published
From the Cybersecurity Sentinels 🛡️ community. Join 200K+ tech enthusiasts and professionals discussing the latest in cybersecurity threats, solutions, and innovations.
Posted in AI & Cybersecurity 🤖🔒. Explore AI's role in cybersecurity, balancing innovation with control to protect against threats.
0 views
0 likes