Government issued IDs leaked: what it means and what to do
Risk level: critical. Can you change it: no. Found in 28 breaches in this directory.
What this data is
Numbers or images of official identity documents, such as passports, national identity cards, Social Security numbers, Medicare cards, tax file numbers, residence permits and voter cards.
The risk on its own
Government ID numbers are built to identify you for life or for many years, and banks, employers and agencies trust them. Some can be used to lodge tax returns, claim benefits or pass identity checks with little else. A scan of the document is worse, because it can be edited and uploaded wherever photo ID is required.
The risk combined with other data
With your name, date of birth and address, a government ID number is close to a complete identity kit. It supports new credit, bank accounts, phone contracts, tax refund fraud, benefit claims and fake employment in your name. Synthetic identity fraud also mixes real ID numbers with invented details, which can go undetected for a long time.
How criminals use it
A fraudster lodges a tax return with your tax or Social Security number and collects the refund.
A scanned passport is edited with a different photo to open a bank or crypto exchange account.
Your ID number is combined with invented details to create a synthetic identity that quietly builds credit.
Someone uses your ID to get a job, leaving income you never earned on your tax record.
What to do now
Contact the agency that issued the document and ask whether a replacement with a new number is available. Australian licences and Medicare cards can usually be replaced, and any new passport carries a new number.
In the US, get an IRS Identity Protection PIN so nobody else can lodge a tax return with your Social Security number.
Place a credit freeze or ban period with every credit bureau.
Get identity support from IDCARE in Australia, IdentityTheft.gov in the US or Report Fraud in the UK.
Set up and secure your online government accounts, such as myGov, a my Social Security account or your HMRC account, before a fraudster registers them in your name.
Ask the breached company to delete stored ID images and to tell you how long it kept them.
Frequently asked questions
Can I get a new Social Security number?
Only in limited cases. The Social Security Administration can issue a new number where ongoing misuse keeps causing harm, but it expects you to have used freezes and fraud reports first.
Should I replace my passport?
A new passport gets a new number, which makes the leaked one outdated for most checks. It usually costs the normal fee, so weigh it against how much else leaked with it.
How do I know if someone is using my ID?
Warning signs include credit enquiries you did not make, tax notices about income you did not earn, mail for accounts you never opened and unexpected credit refusals.
Breaches that exposed this data
National Public Data: 2024-04-09, 134M accounts, Dates of birth, Email addresses, Genders, Government issued IDs, Names, Phone numbers
AT&T: 2021-08-20, 49M accounts, Dates of birth, Email addresses, Government issued IDs, Names, Phone numbers, Physical addresses
Addi: 2026-03-25, 35M accounts, Age groups, Credit scores, Device information, Email addresses, Government issued IDs, Income levels
Prosper: 2025-09-01, 18M accounts, Browser user agent details, Credit status information, Dates of birth, Email addresses, Employment statuses, Government issued IDs
Angel One: 2023-04-01, 6.8M accounts, Bank account numbers, Dates of birth, Email addresses, Financial investments, Government issued IDs, Names
Медицинская лаборатория Гемотест (Gemotest): 2022-04-22, 6.3M accounts, Dates of birth, Email addresses, Genders, Government issued IDs, Health insurance information, Names
Odido: 2026-02-12, 6.1M accounts, Bank account numbers, Customer service records, Dates of birth, Driver's licenses, Email addresses, Genders
JobStreet: 2012-03-07, 3.9M accounts, Dates of birth, Email addresses, Genders, Geographic locations, Government issued IDs, Marital statuses
DentaQuest: 2026-05-23, 2.6M accounts, Dates of birth, Email addresses, Genders, Government issued IDs, Health insurance information, Names
Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.