GoKawiilIf you’ve used your driver’s license to verify your information either in the real world or online, there’s a chance that some of your driver’s license information was stolen by hackers in a security breach against the ID verification giant IDScan that was reportedly active for a year.
“On or around Sept. 1, 2026, IDScan.net received information indicating that certain data may have been accessed without authorization,” IDScan said in a statement on Sept. 4. “Upon this discovery, we took immediate steps to secure our systems and engaged a team of third-party specialists to help determine the full nature and scope of the incident.”
The hack is discussed in more detail by Brian Krebs, a security researcher who runs the website Krebs on Security. He says he was first made aware of the breach after a source alerted him to a post on a Russian cybercrime forum from a hacker offering digital scans of identity documents for more than 170 million people from a service called Nexus.
Krebs was able to access Nexus and verify that it did indeed have the documents it said it had, including a scan of his own driver’s license.
The data includes 153 million driver’s licenses, 10 million ID cards, 3 million travel documents like passports and, according to Krebs, “at least 579,000” medical cards. Most of these records are for US residents, but about 1.1 million Canadian driver’s licenses were also found.
Per IDScan, hackers weren’t able to get every piece of information from those documents, but most likely obtained full names, driver’s license numbers and government-issued ID numbers.
The hackers who ran Nexus boasted that they had obtained the information by “continuously exfiltrating new data for over a year” into a private database from “a major identity verification company.”
The data collected likely came from a range of sources. Krebs says the leak of his information could have resulted from renting a car from Hertz, which uses IDScan to verify driver’s licenses. Other companies that use IDScan include FedEx, Target, GameStop and over 1,000 cannabis dispensaries, car rental agencies and gun shops across 19 states. IDScan reported that it scanned 150 million IDs in 2024 alone.
The New Orleans field office of the FBI is investigating the matter. The FBI has not responded to a request for comment.
Here’s what you can do
... continue reading