IDScan confirms cloud breach linked to dark-web 'Nexus' listing of 153M+ driver's license scans; FBI New Orleans opens formal investigation

Louisiana identity-verification firm IDScan (IDScan.net) confirmed unauthorized access to customer data in its cloud, detected around September 1, 2026 and disclosed September 4, after a dark-web 'Nexus' platform advertised 153M+ US/Canadian driver's license…

IDScan (IDScan.net), a Louisiana-based identity verification provider serving car rental companies, retailers, and cannabis dispensaries, confirmed unauthorized access to customer data stored in its IDScan.net cloud, detected on or around September 1, 2026 (Help Net Security, Cyber Security News); the company's breach notice was published September 4 (BleepingComputer). The involved data includes full names and government-issued ID numbers — TechCrunch specified driver's license numbers and passport or other government ID numbers — though BleepingComputer, quoting the notice, said the third party 'may have accessed or copied' the data, while TechCrunch described the records as stolen during a roughly year-long intrusion. The incident is linked to the 'Nexus' identity-theft platform on the Exploit forum (Cyber Security News), which advertised more than 153 million US and Canadian driver's license scans, 10 million ID cards, 3 million travel documents, and 579,000 medical cards — over 170 million people's records in total (BleepingComputer, Help Net Security, Cyber Security News); TechCrunch, citing Brian Krebs's earlier reporting, put the exposure at more than 150 million US and Canada residents, including license photos. Canadian records exceed 1.1 million, with nearly 474,000 from Ontario, and the trove spans commercial licenses, Common Access Cards, and medical and dispensary IDs, with a record for US Defense Secretary Pete Hegseth reportedly included. Krebs verified the leak's authenticity and traced it to IDScan.net, after which the FBI's New Orleans field office opened a formal investigation; TechCrunch reports that hackers apparently demanded payment for full access to the stolen cache. Multiple lawsuits have been filed, and IDScan is notifying affected individuals and offering free credit monitoring and identity protection services while cooperating with federal law enforcement. Nexus operators claim continuous exfiltration for over a year, with the license count growing by nearly 400,000 in 24 hours, suggesting the intrusion may still be active. The Nexus service was taken offline and disappeared from the dark web shortly after the story published, but criminals likely retain the database, and the investigation remains ongoing.

• IDScan (IDScan.net), a Louisiana-based identity verification provider serving car rental companies, retailers, and cannabis dispensaries, detected unauthorized access to cloud-stored customer data on or around September 1, 2026; its breach…
• Exposed data includes full names and government-issued ID numbers; TechCrunch specified driver's license numbers and passport or other government ID numbers. BleepingComputer said the third party 'may have accessed or copied' the data,…
• The dark-web 'Nexus' identity-theft platform, hosted on the Exploit forum, advertised 153M+ US and Canadian driver's license scans, 10 million ID cards, 3 million travel documents, and 579,000 medical cards — over 170 million people's…
• Canadian records exceed 1.1 million, with nearly 474,000 from Ontario (Cyber Security News).
• The trove spans commercial licenses, Common Access Cards, and medical and dispensary IDs; a record for US Defense Secretary Pete Hegseth was reportedly included (Cyber Security News; Hegseth also named by TechCrunch).
• Nexus operators claim continuous exfiltration for over a year, with the driver's license count growing by nearly 400,000 in 24 hours, suggesting the intrusion may still be active (Cyber Security News).
• The FBI's New Orleans field office opened a formal investigation after Krebs verified the leak's authenticity and traced it to IDScan.net (Help Net Security, Cyber Security News); FBI involvement is also confirmed by BleepingComputer and…
• Multiple lawsuits have been filed, and IDScan is notifying affected individuals and offering free credit monitoring and identity protection services while cooperating with federal law enforcement (BleepingComputer, Help Net Security, Cyber…