GoKawiilIDScan suspected of massive breach exposing 150 million US and Canadian IDs
A dark web marketplace called Nexus emerged this week claiming to sell searchable access to over 150 million U.S. and Canadian driver's licenses and passports, with roughly half a million new records added daily. Security journalist Brian Krebs and researcher Zach Edwards traced the likely source to IDScan, a Louisiana-based identity verification firm used by major consumer brands to check tens of millions of IDs monthly. Both researchers confirmed their own personal documents appeared in the database, and Defense Secretary Pete Hegseth's photo was also reportedly found among the listings.
GoKawiil's interpretation of the reporting above, not reported fact.
Identity verification services sit at the center of everyday transactions—renting cars, buying alcohol, entering venues—meaning a breach at one provider can expose sensitive documents from countless unrelated businesses and their customers. Near real-time access to fresh scans suggests attackers may still have a foothold in IDScan's systems, raising the risk of ongoing exposure rather than a one-time leak. The inclusion of a sitting Defense Secretary's data underscores how identity verification breaches can have national security implications beyond typical consumer fraud.
- A dark web site named Nexus claims to hold 150+ million stolen driver's licenses and passports from the US and Canada.
- Researchers traced the apparent breach to identity verification company IDScan, whose services are used by major consumer brands.
- The leak appears ongoing, with about 500,000 new documents reportedly added daily, and Defense Secretary Pete Hegseth's data was allegedly included.
AmazonBasics 12-Sheet Cross-Cut Shredder — When ID documents are leaking online, the least you can do is stop handing out more on paper — this shredder chews up old bank statements, expired licenses, and pre-approved credit offers into confetti. It also handles credit cards, so nothing usable ends up in your recycling bin. A simple, one-time defense to pair with freezing your credit after news like this.
See AmazonBasics 12-Sheet Cross-Cut Shredder on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: techcrunch.com — Zack Whittaker, 2026-09-02
Published there as: “It sure looks like hackers breached a major ID card verification service”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.