Active High impact Data breach Checked 1h ago

IDScan.net breach leaks 153 million driver's licenses

IDScan.net has confirmed that hackers stole customer information from its cloud service. The stolen data includes names, driver's license numbers, and numbers from other government identity documents. A dark web service claimed to have more than 153 million driver's license scans. IDScan.net is investigating with federal law enforcement and has not confirmed the number of affected people.

Started
Sep 1, 2026
Latest activity
Sep 11, 2026
Attributed to
Not confirmedNo credible attribution yet
Where
United States, Canada
Sectors
Consumers, Multiple sectors
Scale
one identity-verification vendor, IDScan.net, whose scans are used by many retailers and rental companies

Current status

On September 11, CNET reported that attackers allegedly spent a year collecting documents before IDScan closed the access path, while the investigation remained ongoing.

Active: Confirmed and still going. Attacker activity or disruption is continuing.

Impact

The data offered for sale reportedly includes more than 153 million driver's license records and millions of other identity documents. IDScan.net says the affected data may include names and driver's license or other government ID numbers, but it has not confirmed the full scope.

What to do

Watch for a notice from IDScan.net and use its free credit monitoring and identity protection service if offered. Consider freezing your credit with all three major credit bureaus and check your accounts and credit reports for activity you do not recognize.

Timeline

  1. Sep 11, 2026

    CNET reported that attackers allegedly spent a year collecting documents before IDScan closed the access path. The investigation remained ongoing, and no official closure was reported.

    Activecnet.com
  2. Sep 10, 2026

    IDScan confirmed that hackers stole driver's licenses and other government identity documents from its cloud systems. The company said the stolen information includes names and driver's license numbers, and that its investigation is ongoing.

    Activetechcrunch.com
  3. Sep 9, 2026

    Trust Stamp announced faster onboarding and waived setup fees for financial institutions responding to the reported IDScan leak. The announcement did not report that IDScan's investigation had ended, that services had been restored, that the attacker had stopped, or that attribution had changed.

    Emergingfinancialcontent.com
  4. Sep 8, 2026

    IDScan.net acknowledged that an unauthorized party may have accessed or copied customer information from its cloud service. The company said its investigation was ongoing and offered free credit monitoring and identity protection to people found to be affected.

    Emergingbiometricupdate.com
  5. Sep 8, 2026

    ConsumerAffairs reported that the FBI was still investigating the reported sale of more than 153 million US and Canadian driver's license scans.

    Emergingconsumeraffairs.com
  6. Sep 7, 2026

    Additional class action lawsuits were filed against IDScan as the FBI investigation continued.

    Emerginginfosecurity-magazine.com
  7. Sep 3, 2026

    IDScan was hit with multiple lawsuits over the alleged breach.

    Emergingbleepingcomputer.com
  8. Sep 3, 2026

    Reports confirmed the exposed records included the driver's license of Defense Secretary Pete Hegseth, and the FBI opened an investigation into the breach.

    Emerginginfosecurity-magazine.com
  9. Sep 1, 2026

    Security researcher Brian Krebs reported finding over 153 million driver's license scans for sale on a dark web service called Nexus, tracing them to IDScan.net.

    Emergingarstechnica.com

Sources

Related reports