IDScan.net confirms breach after 153M+ driver's license scans surface on dark web

Identity-verification firm IDScan.net confirmed unauthorized access to cloud-stored customer data around September 1, 2026, after a dark web service called Nexus advertised more than 153 million US and Canadian driver's license scans; the FBI's New Orleans…

IDScan.net, a Louisiana-based identity verification provider serving car rental companies, retailers, and cannabis dispensaries, detected unauthorized access to customer data stored on its cloud platform on or around September 1, 2026. The breach came to light after a dark web identity-theft service called Nexus (listed on the Exploit forum, per one report) began advertising records for 170M+ people, including 153M+ US and Canadian driver's license scans, 10M+ ID cards, 3M+ travel documents, and 579,000 medical cards. The trove also includes commercial licenses, Common Access Cards, and dispensary IDs; Canadian records exceed 1.1 million, with nearly 474,000 from Ontario. Krebs traced the leak to IDScan.net and verified its authenticity, prompting the FBI New Orleans field office to open a formal inquiry. IDScan.net is notifying affected individuals, offering free credit monitoring and identity protection, and cooperating with law enforcement. The sources differ on Nexus's status: one report says the service disappeared from the dark web shortly after the story published, while the other notes operators claim continuous exfiltration for over a year, with the license count growing by nearly 400,000 in 24 hours, suggesting the intrusion may still be active.

• IDScan.net detected unauthorized access to cloud-stored customer data on or around September 1, 2026; the company is Louisiana-based and serves car rental companies, retailers, and cannabis dispensaries.
• The dark web service 'Nexus' advertised more than 153 million US and Canadian driver's license scans; one report puts the total trove at records for 170M+ people.
• Additional documents in the listing: 10M+ ID cards, 3M+ travel documents, 579,000 medical cards, plus commercial licenses, Common Access Cards, and dispensary IDs.
• Canadian records exceed 1.1 million, with nearly 474,000 from Ontario alone.
• Nexus operators claim continuous exfiltration for over a year; the driver's license count reportedly grew by nearly 400,000 in 24 hours, suggesting the intrusion may be active.
• A record for US Defense Secretary Pete Hegseth was reportedly part of the leaked dataset.
• Krebs traced and verified the leak's authenticity, which led to the discovery.
• The FBI's New Orleans field office has opened a formal investigation; IDScan.net is cooperating with federal law enforcement.