ID Tech Digest – November 17, 2025

Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:

Sumitomo Mitsui Trust Bank Moves Mobile Customers To FIDO Cloud Authentication With OneSpan

Sumitomo Mitsui Trust Bank is migrating its mobile banking users to cloud-based FIDO authentication through SCSK and OneSpan, marking Japan’s first deployment of OneSpan’s cloud FIDO solution for consumer banking. The bank will use FIDO for both login and transaction-level authentication as regulators push for phishing-resistant security, following significant fraud losses across the sector. OneSpan’s cloud platform and SCSK’s integration services will support SuMiTB’s shift away from passwords and OTPs toward strong cryptographic authentication for mobile channels.

BIO-key And SAVIS Partner To Bring Biometric IAM To Vietnam

BIO-key has entered a strategic partnership with SAVIS Group to distribute and integrate its identity and biometric authentication portfolio across Vietnam. SAVIS will deploy PortalGuard IAM, WEB-key, Identity-Bound Biometrics, and certified fingerprint scanners, aligning with Vietnam’s accelerated digital ID and cybersecurity initiatives. The collaboration targets enterprises and government agencies seeking stronger authentication and passwordless access, supported by SAVIS’s local technical expertise.

DCSA’s ‘Identity Exchange’ Targets Business Digital Identity In Container Shipping

The Digital Container Shipping Association has launched Identity Exchange, a platform that provides verified business identity data through a UI or API for automated onboarding and compliance checks. The service aggregates information from sources including Dun & Bradstreet, GLEIF, EU VIES, and EORI registries, reporting early match rates above 85 percent in pilot deployments. DCSA positions the platform as a foundational tool for digitalizing container trade and reducing manual verification steps across logistics networks.

DoorDash Confirms October Data Breach After Social Engineering Attack

DoorDash has confirmed a data breach triggered by an employee social engineering attack on October 25, exposing contact information for customers, delivery workers, and merchants. While the company says payment and password data were not accessed, affected users questioned whether additional identifiers may be involved based on wording in DoorDash’s notices. The incident underscores the ongoing risk of employee-targeted attacks and the sensitivity of contact datasets, following previous breaches in 2019 and 2022.

Somalia’s E-Visa Platform Hit By Cyber Incident, Exposing Traveller Data

Somalia has acknowledged a breach of its new e-visa platform, with U.S. and UK officials warning that data on at least 35,000 applicants—including names, birth data, photos, and addresses—may have been exposed. The government has shifted the service to a new website while investigating the incident, amid criticism over transparency and concerns about the system’s governance. The breach highlights the risks associated with newly deployed digital entry systems handling sensitive traveler identity data.

India Operationalizes Digital Personal Data Protection Act with ‘SARAL’ Rules

India has notified the DPDP Rules, 2025, completing the regulatory frameworkf under its nationwide privacy law. Built around SARAL principles—Simple, Accessible, Rational, Actionable—the rules mandate standardized consent artifacts, parental consent for minors, and an 18-month transition period for organizations. Tiered penalties up to roughly $30 million apply for violations, and Consent Managers must be Indian-owned as the country scales Aadhaar-linked digital services.

Gentex Acquires BioConnect to Form New ‘Security & Access Control’ Division

Gentex has acquired Toronto-based BioConnect to establish a new Security & Access Control division that merges BioConnect’s enterprise authentication software with Gentex’s biometrics portfolio, including EyeLock. The combined offering targets high-security environments with integrated physical and digital identity solutions. BioConnect CEO Rob Douglas will help lead the transition as Gentex expands deeper into enterprise access control and critical-infrastructure markets.

Privacy Watchdog ‘PILLAR’ Warnings Mount as New Zealand Pushes Digital ID

New Zealand advocacy group PILLAR has issued warnings about the government’s digital ID expansion, arguing that optional participation may become effectively mandatory for essential services. The group cites recent credential leaks and growing global breach activity as evidence that centralized identity systems pose systemic risks. Officials, however, continue to frame the digital ID program as voluntary and designed for efficiency and fraud reduction.

–

By the ID Tech Editorial Team