iD Tech Data Breach

TechCrunch reported that the attacker claimed to have compromised the system on January 3, 2023 and obtained nearly one million user records. That date is the attacker's claim, not an exact attack or discovery date confirmed by iD Tech. At the time of the report, the company had not publicly detailed the incident.

A public breach source says the iD Tech-attributed collection supplied to it contained 415,121 unique email addresses and listed names, dates of birth, email addresses, and plaintext passwords at collection level. Those classes do not establish that every field appeared in every row, that the data remained current, or that every email belonged to a child, parent, or particular account.

The local searchable subset contains 415,063 email documents; names, dates of birth, and passwords were not imported into local search data. A result can therefore establish only that the queried email occurs in this local email subset attributed to iD Tech. It cannot establish age, child or parent status, account ownership, password presence or reuse, field co-occurrence, misuse, or a definitive relationship with iD Tech. A negative result covers only the 415,063 locally searchable emails.