Identity-document theft is the unauthorized capture, copying, or removal of passports, national ID cards, driver’s licenses, and similar personal records. In cyber security, it matters because these documents can be used to impersonate a victim, open fraudulent accounts, bypass verification checks, or support later phishing and social-engineering attacks. Unlike a pure malware incident, the harm may come from the data itself being exposed in a normal business process.
This term often appears in environments that collect identity documents at the point of service, such as hotels, car rentals, and financial onboarding. Attackers may exploit busy front desks, weak storage practices, shared devices, or poor retention controls to access document images or scans. Defenses include limiting who can view documents, encrypting stored copies, using secure scanning workflows, and deleting records as soon as they are no longer needed. Strong access control and segmentation reduce the chance that a simple workflow becomes a fraud pipeline.