ID verification company IDScan disclosed that hackers accessed its systems without authorization, a breach later linked to a criminal marketplace called Nexus selling scans of over 170 million identity documents. Security researcher Brian Krebs verified the stolen trove includes 153 million driver's licenses, 10 million ID cards, 3 million passports and travel documents, and hundreds of thousands of medical cards, mostly belonging to US residents with some Canadian records included. The attackers claimed to have quietly siphoned data from IDScan's systems for more than a year before being detected.
cnet.com
· 2026-09-10
IDScan.net, an identity verification company, disclosed that an unauthorized third party may have accessed customer accounts containing full names and government ID numbers. In response, the company is notifying affected customers and providing free credit monitoring and identity protection services while cooperating with federal law enforcement.
engadget.com
· 2026-09-10
IDScan, a Louisiana-based identity verification firm used by venues and dispensaries, confirmed hackers stole driver's licenses and other government ID data from its cloud systems. The admission follows a report by cybersecurity journalist Brian Krebs that a dark web site allowed searches of over 150 million U.S. and Canadian residents' license records, including photos and data belonging to high-profile figures like Defense Secretary Pete Hegseth.
techcrunch.com
· 2026-09-10
Identity verification firm IDScan has acknowledged that hackers accessed customer data stored on its IDScan.net cloud platform, days after reports tied the company to a leaked database of over 153 million driver's license scans being sold on the dark web. The company said it discovered the unauthorized access around September 1 and is still investigating the scope, but confirmed exposed data can include names and government ID numbers.
bleepingcomputer.com
· 2026-09-10
IDScan, an identity verification firm used by rental car companies, retailers and other businesses, faces multiple lawsuits after a dark-web service called Nexus allegedly offered access to over 153 million U.S. and Canadian driver's licenses along with millions of other ID documents. Journalist Brian Krebs traced the leaked data back to IDScan, and the FBI's New Orleans office has reportedly opened an investigation. IDScan has not confirmed a breach occurred or commented publicly on the allegations.
bleepingcomputer.com
· 2026-09-04
A dark-web marketplace called Nexus advertised more than 153 million US and Canadian driver's license images, along with millions of ID cards, travel documents and medical cards, before going offline after Krebs on Security exposed it. The listings included not just standard front-and-back scans but infrared and ultraviolet images normally used by businesses to verify document authenticity. The FBI's New Orleans office is reportedly investigating a possible breach at Louisiana-based identity-verification firm IDScan.net, which Nexus claimed as its data source.
techspot.com
· 2026-09-03
A trove of roughly 153 million scanned driver's licenses, reportedly stolen from an identity verification company, has surfaced for sale online. The leak underscores how centralized repositories of scanned IDs, built to confirm users' identities, have themselves become prime targets for hackers.
gizmodo.com
· 2026-09-02
Cybersecurity journalist Brian Krebs discovered a dark web service called Nexus selling over 153 million scanned driver's licenses, medical cards and other ID documents from the US and Canada. Krebs traced the likely source to a breach at Louisiana-based verification firm IDScan, whose clients include Hertz, Target, FedEx and Motorola, and even found his own license used as a sample to advertise the stolen trove, alongside Defense Secretary Pete Hegseth's ID.
engadget.com
· 2026-09-02
GoKawiil