Identity verification firm IDScan.net has confirmed a significant data breach after hackers accessed a cloud platform containing over 153 million driver’s license scans and other sensitive personal documents.

Key Points

• IDScan.net acknowledged unauthorized access to its cloud platform on September 4, 2026, following reports of a massive data leak.
• The compromised database, discovered on the dark web marketplace Nexus, contains 153 million driver’s licenses, 10 million ID cards, and 3 million travel documents.
• Security journalist Brian Krebs traced the leaked data to the Louisiana-based company after verifying his own personal information within the stolen records.
• The FBI’s New Orleans field office has launched a formal investigation into the breach, which reportedly includes the identification documents of federal officials.
• IDScan.net is currently notifying affected individuals and providing complimentary credit monitoring and identity protection services.

Why it Matters

This breach exposes millions of North Americans to long-term identity theft risks due to the permanent nature of government-issued identification numbers. The incident highlights critical vulnerabilities in third-party identity verification services that handle sensitive data for major retailers, car rental agencies, and cannabis dispensaries.