IDScan confirms breach of 150M-plus driver licenses

IDScan.net posted a Notification of Data Security Incident on 4 September 2026 after the Louisiana identity-verification vendor received a tip, on or around 1 September 2026, that certain data may have been accessed without authorization. The company said it secured systems and hired third-party specialists. The investigation is still open.

An unauthorized third party may have accessed or copied certain customer information stored in IDScan.net cloud accounts. Fields that may be in that set include full names and driver's license or other government-issued identification numbers. The website notice, later confirmed in the trade press, does not give a company-stated headcount of affected people.

TechCrunch and BleepingComputer tie the notice to Brian Krebs's dark-web reporting of a searchable cache of about 150 million to 153 million US and Canadian licenses, including photos. The FBI is investigating. The Pentagon has said it is aware of the suspected breach. TechCrunch notes the company holds over 150 million driver's license records and still does not say how many individuals were affected.

The company notice never confirms a hard 153 million victim count. Krebs verified samples from the Nexus dark-web service, including his own record. That reporting is separate from IDScan's "may have accessed" wording.

The notice also says full access to the information required payment. In an abundance of caution, IDScan is notifying potentially impacted people and offering free credit monitoring and identity protection. Enrollment is at 1-833-516-2980, Monday through Friday, 8 AM to 8 PM ET, excluding holidays. Written questions go to 8814 Veterans Memorial Blvd, Suite 3-124, Metairie, LA 70003.

Some offers on this page may be paid placements or contain affiliate links.