IDScan Confirms Data Breach Following 153 Million Driver’s Licenses Leaked on the Dark Web
IDScan.net confirms a breach after a marketplace advertised over 153 million US and Canadian driver's licenses, possibly exfiltrated continuously for over a year.
The Louisiana identity-verification firm detected unauthorized access on or around September 1, 2026, after the 'Nexus' identity theft service on the Exploit forum began advertising 170M+ people's records, including 153M+ driver's licenses, 10M+ ID cards, 3M+ travel documents, and 579,000 medical cards. Canadian records exceed 1.1 million, and the trove includes commercial licenses, Common Access Cards, and dispensary IDs, with a record for US Defense Secretary Pete Hegseth reportedly included. Nexus operators claim continuous exfiltration for over a year, with the license count growing by nearly 400,000 in 24 hours, suggesting the intrusion may be active. The FBI's New Orleans field office has opened a formal inquiry, and IDScan.net is offering free credit monitoring.
- Nexus claims continuous exfiltration for over a year; driver's license count grew by nearly 400,000 in 24 hours.
- Trove spans US and Canadian documents, including commercial licenses, Common Access Cards, medical and dispensary IDs.
- FBI's New Orleans field office opened a formal inquiry; IDScan.net is cooperating with law enforcement.
- A record for US Defense Secretary Pete Hegseth was reportedly part of the leaked dataset.
- Canadian records exceed 1.1 million, with nearly 474,000 from Ontario alone.
- Vendors
- IDScan.net
- Threat actors
- Nexus
- Victims
- IDScan.net
- Organizations
- FBIExploit forum
- Countries
- United StatesCanada
From the original article
4 min read at cybersecuritynews.com
IDScan. net, a Louisiana-based identity verification firm whose technology underpins age and identity checks for retailers, bars, and other Fortune 500 clients, has confirmed a data breach after a criminal marketplace began advertising more than 153 million driver’s licenses from the United States and Canada. The company disclosed that it detected unauthorized access to its systems […]
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.