IDScan confirms breach tied to 153 million stolen driver’s licenses

Identity verification firm IDScan.net confirmed unauthorized access to its cloud platform after a dark-web marketplace advertised more than 153 million US and Canadian driver's license scans. The FBI is investigating, lawsuits have been filed, and the company…

IDScan.net, a Louisiana-based identity verification provider, confirmed that an unauthorized third party accessed or copied customer data in its cloud platform. The company said it became aware of the potential compromise around September 1, 2026, and published a breach notice on September 4, 2026. The exposed data may include full names and government-issued ID numbers. The incident was linked to the 'Nexus' dark-web marketplace, which advertised more than 153 million US and Canadian driver's license scans, plus 10 million ID cards, over 3 million travel documents, and at least 579,000 medical cards. Some reports describe Nexus as Russia-linked and say it operated on the Exploit forum. One report says the trove covered more than 170 million people's records and included Canadian records exceeding 1.1 million, with nearly 474,000 from Ontario alone. The same report says the dataset also included commercial licenses, Common Access Cards, dispensary IDs, and a record reportedly belonging to US Defense Secretary Pete Hegseth. Nexus operators allegedly claimed continuous exfiltration for over a year, and the driver's license count reportedly grew by nearly 400,000 in 24 hours, suggesting the intrusion may still be active. KrebsOnSecurity traced the leak to IDScan.net, prompting an FBI New Orleans field office investigation. IDScan.net said it is cooperating with federal law enforcement, notifying affected individuals, and offering free credit monitoring and identity protection services. Multiple lawsuits have been filed. The Nexus marketplace disappeared from the dark web shortly after the story was published, but reports note that criminals likely retain the database. IDScan.net did not disclose how many customers were affected. The company's identity verification services are widely used by banks, car rental companies, retailers, cannabis dispensaries, and gun stores.

• IDScan.net detected unauthorized access on or around September 1, 2026, and published a breach notice on September 4, 2026.
• Exposed data may include full names and government-issued ID numbers.
• The Nexus dark-web marketplace advertised more than 153 million US and Canadian driver's license scans.
• The database also contained 10 million ID cards, more than 3 million travel documents, and at least 579,000 medical cards.
• One report says the trove covered over 170 million people's records, with Canadian records exceeding 1.1 million, including nearly 474,000 from Ontario alone.
• The same report says records included commercial licenses, Common Access Cards, dispensary IDs, and a record reportedly belonging to US Defense Secretary Pete Hegseth.
• Nexus operators claimed continuous exfiltration for over a year, with the license count growing by nearly 400,000 in 24 hours.
• The FBI's New Orleans field office opened a formal investigation; IDScan.net says it is cooperating.