GoKawiilIDScan breach exposes 153 million driver's licenses, hackers ran year-long data theft via Nexus
ID verification company IDScan disclosed that hackers accessed its systems without authorization, a breach later linked to a criminal marketplace called Nexus selling scans of over 170 million identity documents. Security researcher Brian Krebs verified the stolen trove includes 153 million driver's licenses, 10 million ID cards, 3 million passports and travel documents, and hundreds of thousands of medical cards, mostly belonging to US residents with some Canadian records included. The attackers claimed to have quietly siphoned data from IDScan's systems for more than a year before being detected.
GoKawiil's interpretation of the reporting above, not reported fact.
IDScan verifies identities for businesses like car rental companies, meaning millions of people who never directly interacted with the firm could still have had their government ID data exposed. Stolen driver's license numbers and personal identifiers are valuable for identity theft, fraud, and bypassing know-your-customer checks at banks or other services, making this breach a long-tail risk for affected individuals. The yearlong undetected exfiltration also raises questions about monitoring practices at companies trusted with sensitive identity verification data.
- IDScan.net suffered a breach reportedly ongoing for over a year before discovery in September 2026.
- Stolen data includes 153 million driver's licenses, 10 million ID cards, 3 million passports, and medical cards, mostly from US residents.
- Businesses like Hertz that rely on IDScan for verification may have inadvertently exposed customer data to the breach.
Aura Identity Theft Protection — With 153 million driver's licenses reportedly exposed in the IDScan breach, active monitoring is the practical response. Aura's identity theft protection service watches for your personal data showing up where it shouldn't and alerts you to suspicious credit activity, so you can react fast instead of finding out months later.
See Aura Identity Theft Protection on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: cnet.com — Joe Hindy, 2026-09-10
Published there as: “Over 153 Million Driver’s Licenses Were Stolen by Hackers. Here’s What to Know”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.