IDScan news
Archived — this story has rotated out of today’s deck. It is kept here in full.
The gist
Hackers sold 153 million driver's license scans from IDScan.net on dark web Nexus. The breach exposes risks of identity verification and affects millions.
Background
IDScan.net is a Louisiana-based identity verification company that scans IDs for thousands of businesses, including Hertz, FedEx, Target, and marijuana dispensaries. The dark web marketplace Nexus claimed to sell over 153 million driver's license scans, allegedly stolen from IDScan.net. The FBI's New Orleans field office opened an investigation, and IDScan.net said it is investigating. The breach highlights the privacy risks of age and identity verification systems.
How it unfolded
- Sep 2, 2026KrebsOnSecurity reported a dark web service named Nexus selling 153 million driver's license scans, allegedly from IDScan.net. The FBI opened an investigation.
- Sep 2, 2026Nexus went offline shortly after the report. IDScan.net's COO said the company is investigating.
- Sep 3, 2026News outlets including TechCrunch and ABC7 covered the breach, noting the FBI probe and the scale of the data exposed.
Who’s saying what
- Official
- FBI's New Orleans field office opened an official investigation into the apparent breach involving IDScan.net.
- Analysts
- Cybersecurity experts warn that identity verification services are prime targets and that this breach underscores the inherent risks of collecting sensitive ID data.
- Caution
- Consumers are urged to freeze their credit and monitor for identity theft, as the leaked data could be used for fraud.
Still unverified
The exact method of the breach and the full extent of data stolen are not yet confirmed. IDScan.net has not publicly acknowledged the breach beyond saying it is investigating.