IDScan Confirms Data Breach Linked to 153 Million Stolen IDs

IDScan, an identity verification technology provider, has confirmed that unauthorised actors accessed customer data stored on its cloud platform. The confirmation follows reports of a massive database containing over 153 million driver’s licence scans being advertised on the dark web.

The company discovered the incident on or around 1 September 2026. In a security notice, IDScan stated that an unauthorised third party may have accessed or copied customer information stored within accounts on the IDScan.net cloud.

Exposed Personal Information

The compromised data may include customers’ full names, as well as driver’s licence or other government-issued identification numbers. While IDScan’s notification did not explicitly confirm the theft of document images, reports suggest the breach allowed threat actors to steal scans of driver’s licences.

The scale of the potential exposure was first highlighted by investigative journalist Brian Krebs. On 1 September, Krebs reported that a dark-web platform known as “Nexus” was advertising access to a vast repository of identity documents. The database allegedly contained:

• Over 153 million U.S. and Canadian driver’s licence scans;
• 10 million ID cards;
• 3 million travel documents; and
• 579,000 medical cards.

Corporate Response and Law Enforcement

IDScan provides identity authentication services used by financial institutions, car rental agencies, retailers, and hospitality businesses. The company has engaged third-party specialists to investigate the nature and scope of the incident and is cooperating with federal law enforcement, including the FBI.

As a precautionary measure, IDScan is notifying potentially impacted individuals and providing free credit monitoring and identity protection services. Although the Nexus platform was taken offline following the initial reports, the stolen data remains a target for various threat actors on the dark web.