Identity-document data is information taken from official identity records such as passports, driver’s licenses, national ID cards, or scans of those documents. It may include document numbers, full names, dates of birth, addresses, photos, and machine-readable codes. Because this data can be used to impersonate a person, it carries a high fraud risk.
In cyber attacks, identity-document data is often stolen from employee files, customer onboarding systems, or document-management platforms and then used for account takeover, synthetic identity fraud, and social engineering. Defenders treat it as highly sensitive: they limit collection, encrypt stored files, enforce strict access controls, log access, and remove data that is no longer needed. If such records are exposed, response teams usually assess fraud exposure quickly and prepare notification and verification steps.