IDScan confirms breach exposing 153 million US and Canada driver's licenses

September 15, 2026 at 11:30 PM2 min

This digest was compiled by AI from multiple sources — links to the originals are below.

IDScan confirmed attackers breached its cloud platform, exposing data tied to 153 million driver's license scans sold via the Nexus darknet service. The company blocked access around September 1, 2026 and hired outside security experts. It now offers affected users free credit monitoring and identity theft protection.

Key Facts

IDScan confirmed unauthorized access to its cloud platform around September 1, 2026, and blocked the attackers' access.
The breach may involve full names, driver's license numbers, and other ID numbers stored in IDScan.net customer accounts.
Security journalist Brian Krebs traced records in the Nexus darknet service to IDScan via scans made at Hertz car rental.
Nexus operators claimed to hold over 10 million other IDs, 3 million travel documents, and 579,000 medical records.
IDScan is notifying potentially affected users and offering free credit monitoring and identity theft protection.

Breach Confirmation

IDScan confirmed that attackers breached its cloud platform and may have copied information stored in customer accounts of IDScan.net. The company learned of possible unauthorized access around September 1, 2026, then blocked the attackers and hired outside security experts to investigate. Preliminary findings indicate the exposed data may include full names, driver's license numbers, and other identification numbers. The company's incident notice page was configured with a noindex directive, preventing search engines from indexing it.

Nexus Darknet Link

Security journalist Brian Krebs discovered the Nexus darknet service selling access to more than 153 million driver's license scans from the US and Canada. Krebs verified several records, including his own documents and his mother's driver's license, tracing them to IDScan through scans made at Hertz car rental. Nexus operators claimed to possess over 10 million other IDs, more than 3 million travel documents, and about 579,000 medical records. After Krebs published his investigation, Nexus went offline, but stolen data likely remains with the service's operators.

User Notification and Lawsuits

Several class-action lawsuits were filed against IDScan before the company officially confirmed the breach. IDScan is notifying all potentially affected users and offering free credit monitoring and identity theft protection services. BleepingComputer reported that multiple attackers have since claimed to sell a full copy of the dump, though journalists could not verify those claims.