Massive Data Breach Exposes 153 Million Driver’s Licenses – IDScan Investigation Ongoing
A staggering 153 million driver’s licenses have been stolen from a database linked to identity verification company IDScan. The breach, which was reported to be selling on dark-web platforms, has left millions of individuals vulnerable to identity theft and fraud.
IDScan, a US-based company that provides identity verification technology to various industries, including car rental companies and financial institutions, confirmed the breach in a security notice published on September 4. According to the statement, hackers may have accessed customer data stored in its cloud platform, potentially compromising sensitive information such as full names, driver’s license numbers, and government-issued identification numbers.
The exposed database was reportedly offered for sale on the dark-web platform “Nexus,” which advertised access to over 153 million US and Canadian driver’s license scans, as well as 10 million ID cards, 3 million travel documents, and 579,000 medical cards. Cybersecurity journalist Brian Krebs verified samples from the database by searching for records belonging to himself and others who consented to the searches.
IDScan’s platform is used to scan, authenticate, and extract information from government-issued identification documents. The company provides identity verification services to a wide range of industries, including hospitality businesses and gun shops. However, it appears that hackers have exploited vulnerabilities in IDScan’s cloud platform to gain access to sensitive customer data.
The breach has significant implications for individuals whose driver’s licenses were compromised. With the stolen information potentially being sold on dark-web platforms, those affected may be at risk of identity theft and fraud. To mitigate this risk, IDScan is offering free credit monitoring and identity protection services to potentially impacted individuals.
The investigation into the breach remains ongoing, with IDScan cooperating with federal law enforcement agencies, including the FBI, which confirmed that it was investigating the incident. In response to the breach, IDScan has reviewed its policies and procedures related to data security and is taking steps to secure its systems.
As this story highlights, the potential for data breaches and identity theft is a growing concern in today’s digital age. With more and more sensitive information being stored online, it’s essential that companies prioritize data security and take proactive measures to protect their customers’ sensitive information. As individuals, we must also remain vigilant and take steps to safeguard our own personal data.
In light of this breach, it’s crucial for consumers to take control of their identity and credit by monitoring their accounts regularly and taking advantage of free services offered by companies like IDScan. Additionally, being cautious when sharing personal data online and using strong passwords can help prevent similar breaches in the future.
Source: Bleeping Computer — 2026-09-10