iD Tech Data Breach (2023)

On January 3, 2023, iD Tech appeared in a public data breach notification after nearly one million records containing information on 415,000 unique individuals were posted to a popular hacking forum. The exposed data included names, email addresses, dates of birth, and plain-text passwords from a breach that occurred in January 2023. Families who enrolled children in iD Tech’s coding and technology camps are directly affected.

Primary Disclosure Details

The listing on Have I Been Pwned states that the iD Tech breach exposed 415K unique email addresses, names, dates of birth, and passwords in plain text. The data was uploaded to a hacking forum in February 2023, roughly one month after the initial compromise. The company did not respond to repeated attempts by researchers to notify them of the incident. No additional details on the attack vector or exact systems compromised were provided in the primary disclosure.

Why This Matters for You and Your Family

When a service used by children and teenagers is breached, the consequences reach every member of the household. Names and dates of birth combined with email addresses create straightforward building blocks for identity theft. Plain-text passwords are especially dangerous because many parents reuse the same password across family accounts, including school portals, banking, and streaming services. A breach that began with kids’ tech camp registrations can therefore expose the entire family’s digital life.

January 2023 breach timing means the data has had time to circulate among criminals who specialize in credential stuffing and account takeover. If your child attended an iD Tech camp that year, their information is now available to anyone who downloaded the forum post.

Doxxing and Identity-Chain Risks

Children’s data is frequently the starting point for larger doxxing chains. A date of birth and parent email can be cross-referenced with gaming usernames, social media handles, or school directories. Once attackers link a child’s record to a parent’s identity, they can target family addresses, phone numbers, and financial accounts. Credential leaks like this one routinely cascade into gaming account takeovers, where stolen passwords grant access to Discord, Roblox, Minecraft, or Steam profiles that contain even more personal details and payment methods.

What to Do

• Run a DoxxScan to map every link between your family’s emails, usernames, phone numbers, and real-world identities, with cleanup handled by the service.
• Rotate the password used at iD Tech anywhere it is reused and immediately enable two-factor authentication with an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is caught in hours, not months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same addresses and credentials.
• Let DoxxScan remediation specialists manage takedown requests for any exposed family data found on broker and leak sites.

The incident underscores how a single camp registration can create long-term exposure for both children and parents. Moving forward, treating every kid-focused online service as a potential entry point for family-wide risk is essential. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.