IDScan Confirms Data Breach Following 153 Million Driver’s Licenses Leaked on the Dark Web
Brief
IDScan.net, a Louisiana-based identity verification firm whose technology underpins age and identity checks for retailers, bars, and other Fortune 500 clients, has confirmed a data breach after a criminal marketplace began advertising more than 153 million driver’s licenses from the United States and Canada.
The company disclosed that it detected unauthorized access to its systems on or around September 1, 2026, and immediately began securing its environment while bringing in third-party forensic specialists to determine the scope of the intrusion.
IDScan.net Data Breach
The breach came to light not through IDScan.net’s own disclosure timeline alone, but through investigative reporting from security journalist Brian Krebs, who was alerted on August 31 to a new identity theft service called “Nexus” being advertised on the Russian-language cybercrime forum Exploit .