IDScan Leaked Driver’s Licenses. Now It’s Providing Free ID Safety.

IDScan.net is a cloud-based identity-verification platform that companies use to substantiate age, identification, and compliance standing. The firm disclosed an information safety incident through which an unauthorized third celebration might have accessed and copied buyer info saved in its cloud surroundings.

Affected knowledge might have included full names and driver’s license or different government-issued identification numbers. IDScan.web disclosed the incident at idscan.net/notification-data-security-incident/.

What Happened

The firm says it realized of the potential unauthorized entry on or round September 1, 2026, and has since engaged federal regulation enforcement.

IDScan.web says it acquired info on or round September 1, 2026, suggesting some knowledge might have been accessed with out authorization. The firm says it’s cooperating with federal regulation enforcement and that its investigation stays ongoing.

“While the investigation is ongoing, IDScan.net has determined that an unauthorized third party may have accessed and/or copied certain customer information stored within their accounts on the IDScan.net cloud.” , IDScan.web, public incident discover.

The Dark Web Dimension

Separate investigative reporting linked the incident timing to a darkish net market promoting a large trove of driver’s license scans, although IDScan.web has not confirmed that connection.

Separately, journalist Brian Krebs reported on September 1 {that a} darkish net market referred to as Nexus was promoting driver’s license scans. The itemizing reportedly included greater than 153 million U.S. and Canadian information.

Reporting from KrebsOnSecurity and TechCrunch steered a possible connection between that trove and IDScan.web knowledge. IDScan.web has not publicly confirmed the Nexus market because the supply.

That hyperlink stays an externally reported allegation with robust inferential assist, not a confirmed official attribution. The timing of IDScan.web’s incident discover and the Nexus itemizing leaves the connection open and unattributed, regardless of an ongoing FBI investigation.

“Though full access to the information required payment, in an abundance of caution, we are notifying potentially impacted individuals of this incident and providing access to free credit monitoring and identity protection services.” , IDScan.web, public incident discover.

Why This Exposure Carries Higher Risk

Government-issued ID scans should not like a compromised e mail password or a leaked bank card quantity you may cancel and substitute. A driver’s license number paired together with your full identify can gas account fraud, artificial identification creation, and impersonation throughout verification methods that deal with these credentials as definitive proof of identification.

Because driver’s licenses are persistent credentials, the publicity doesn’t expire when the breach is contained. The harm potential stretches ahead in time. Similar dangers have emerged from information uncovered by way of cloud storage vulnerabilities at different main platforms.

What You Should Do Now

Taking just a few steps now can restrict your publicity, even if you’re not but positive whether or not your info was affected.

Accept the free credit score monitoring and identification safety companies IDScan.web is providing. Then place a fraud alert or credit score freeze with the three main bureaus: Equifax, Experian, and TransUnion.

Watch for phishing makes an attempt or suspicious account exercise that references your private particulars. A credit freeze prices nothing and stops most new-account fraud earlier than it begins. Reviewing broader personal-security habits may also help you keep secure in opposition to rising threats.

The Bigger Picture

A single vendor’s compromised archive changing into a possible supply for 153 million information on a darkish net market just isn’t a contained company downside. Any enterprise accumulating and storing identification paperwork at scale carries threat that reaches far past its personal prospects.

Regulatory and authorized scrutiny of identity-verification distributors is more likely to intensify. The rise of instruments like a surveillance app constructed to focus on people exhibits how collected knowledge might be weaponized, and given the dimensions of what’s alleged right here, that stress is overdue.