ZeroHour
Organization

Nexus

3 mentions in 7 days · 5 in 30 days · 5 total · first seen · last

Timeline

IDScan confirms breach after 153 million driver’s licenses leak on dark web

IDScan.net confirmed hackers accessed cloud-stored customer data after a dark web listing exposed 153 million US and Canadian driver's license scans.

IDScan.net, a Louisiana-based identity verification provider serving car rental companies, retailers, and cannabis dispensaries, confirmed unauthorized access to customer data stored on its cloud platform around September 1, 2026. A dark web marketplace called Nexus advertised more than 153 million US and Canadian driver's license scans, plus 10 million ID cards, 3 million travel documents, and 579,000 medical cards. Krebs traced the leak to IDScan.net, prompting an FBI New Orleans investigation; the company is notifying affected individuals and offering free credit monitoring while cooperating with federal law enforcement.

Help Net Securityupdated · 4d agofirst · 4d agoData breach in the wild 4 sources

IDScan confirms breach after hackers offer 153 million driver’s license scans for sale

IDScan confirmed hackers accessed customer data in its cloud after scans of roughly 153 million driver's licenses surfaced for sale on a dark web marketplace.

IDScan.net published a breach notice on September 4, after learning around September 1 that an unauthorized third party may have accessed or copied customer information in its cloud platform, potentially including full names and government-issued ID numbers. KrebsOnSecurity tied the incident to Nexus, a Russia-linked dark web marketplace selling access to over 153 million US and Canadian driver's license scans, plus 10 million ID cards, more than 3 million travel documents, and at least 579,000 medical cards. The company did not disclose how many customers were affected, is offering free credit monitoring, faces multiple lawsuits, and the FBI has opened an inquiry. IDScan's government ID authentication is widely used by banks, cannabis retailers, and gun stores.

The Record · 5d agoData breach in the wild

Srsly Risky Biz: America's Drivers Licence Breach is a National Security Disaster

Dark web service Nexus sold 153 million US and Canadian driver's licenses, linked to identity verification firm IDScan under FBI investigation.

Krebs On Security reported that a dark web service called Nexus sold access to 153 million US and Canadian driver's licenses, claiming over a year of continuous exfiltration from a major identity verification company, with roughly 400,000 new licences added in a single day. Krebs verified the data as genuine and linked the incident via circumstantial evidence to identity verification firm IDScan, whose licences of senior US officials including Secretary of War Pete Hegseth appeared in the database; the FBI is investigating and IDScan has confirmed a breach inquiry. The article argues the data has national security implications, citing how Chinese APT espionage (Anthem, Equifax, Marriott, OPM) and Bellingcat investigations exploited leaked databases. Class action suits are being prepared, and the piece calls for stricter oversight of identity verification firms.

Risky Business News · 5d agoData breach in the wild

It sure looks like hackers breached a major ID card verification service

Suspected breach of ID verification firm IDScan exposed over 150 million US and Canadian driver's licenses and passports, sold via dark web site Nexus.

Independent journalist Brian Krebs reported that a dark web site called Nexus is selling searchable access to more than 150 million driver's licenses and passports belonging to people in the United States and Canada, adding roughly 500,000 documents daily from a 'major identity verification company.' Krebs and researcher Zach Edwards identified Louisiana-based identity verification service IDScan as the likely source; Krebs' own license and Defense Secretary Pete Hegseth's records appeared in the database. The FBI confirmed it is looking into the incident and IDScan says it is investigating; Nexus went offline shortly after the report went live.

TechCrunch · Security · 13d agoData breach in the wild

153M+ driver’s licenses for sale on new dark web platform

New dark web platform Nexus is selling 153 million driver's license scans; FBI investigates apparent breach of IDScan.net.

A dark web platform called Nexus claims to sell more than 153 million driver's license scans, 10 million ID cards, 3 million travel documents, and 579,000 medical cards including marijuana dispensary cards. KrebsOnSecurity linked the trove to identity verification provider IDScan.net, with records reportedly containing front-and-back images plus infrared and ultraviolet scans and timestamps matching holders' travel or car-rental activity. The FBI's New Orleans field office opened an investigation into the apparent breach; IDScan.net says it is investigating.

Malwarebytes Labs · 13d agoData breach