IDScan confirms breach after hackers offer 153 million driver’s license scans for sale
IDScan confirmed hackers accessed customer data in its cloud after scans of roughly 153 million driver's licenses surfaced for sale on a dark web marketplace.
IDScan.net published a breach notice on September 4, after learning around September 1 that an unauthorized third party may have accessed or copied customer information in its cloud platform, potentially including full names and government-issued ID numbers. KrebsOnSecurity tied the incident to Nexus, a Russia-linked dark web marketplace selling access to over 153 million US and Canadian driver's license scans, plus 10 million ID cards, more than 3 million travel documents, and at least 579,000 medical cards. The company did not disclose how many customers were affected, is offering free credit monitoring, faces multiple lawsuits, and the FBI has opened an inquiry. IDScan's government ID authentication is widely used by banks, cannabis retailers, and gun stores.
- 153M+ driver's license scans offered for sale on Nexus dark web marketplace
- Database also contained 10M ID cards, 3M+ travel documents, 579,000 medical cards
- Breach notice posted September 4 was hidden from search engine indexing
- Multiple lawsuits filed and the FBI launched an inquiry into the incident
- IDScan serves banks, cannabis retailers, and gun stores for ID authentication
- Vendors
- IDScan.net
- Products
- IDScan.net cloud
- Victims
- IDScan.net
- Organizations
- NexusFBIKrebsOnSecurityTechCrunch
- Countries
- United StatesCanada
From the original article
2 min read at therecord.mediaA notice dated September 4 but not widely shared shows that IDScan acknowledged a data breach but did not specify how many people were affected.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.