Identity verification firm IDScan.net has confirmed that unauthorized actors accessed customer data hosted on its cloud platform, following reports that over 153 million scanned driver’s licenses appeared on a dark web marketplace.
The Louisiana-based company, which supplies identity checking services to retailers, car rental operators, and cannabis dispensaries, published a security notice on September 4, 2026. The disclosure followed media reports indicating that a dark web service named Nexus was offering massive tranches of North American identification documents.
According to IDScan’s statement, the firm discovered on or around September 1, 2026, that unauthorized parties may have accessed or copied specific customer records stored in its cloud accounts. The exposed records include individual names alongside driver’s license numbers and other government-issued identification details.
“On or around September 1, 2026, IDScan.net received information indicating that certain data may have been accessed without authorization. Upon this discovery, we took immediate steps to secure our systems and engaged a team of third-party specialists to help determine the full nature and scope of the incident. This investigation is currently ongoing,” the company stated.
Security researcher Brian Krebs initially uncovered the exposure after being alerted to an advertisement on the Russian cybercrime forum Exploit. The listing offered access to more than 153 million scanned driver’s licenses from the United States and Canada, alongside 10 million ID cards, 3 million travel documents, and 579,000 medical cards. Krebs verified the authenticity of the leak by locating records tied to individuals who consented to a database search, ultimately tracing the exposed infrastructure back to IDScan.net.
Following the disclosure, the FBI’s New Orleans field office launched a formal investigation into the incident. IDScan confirmed it is cooperating with federal law enforcement while offering complimentary credit monitoring and identity protection services to potentially affected individuals out of an abundance of caution.
“In response to this incident, we immediately began an investigation and reviewed our policies and procedures related to data security. We are also cooperating with federal law enforcement on their investigation,” IDScan added.