IDScan.net data breach
Was I affected?
IDScan.net confirmed a breach affecting about 13 million people, exposing names, driver's license numbers, passport numbers and dates of birth. You may be affected if a business in the U.S. or Canada (for example a car rental counter, bar, venue, dispensary or bank) scanned your driver's license or other ID with an IDScan/VeriScan device or app, especially between April and September 2026.
| Announced | Sep 1, 2026 |
|---|---|
| When it happened | April 4 – September 2, 2026 |
| Country | United States |
| People affected | 13 million |
| Data exposed | Names, Driver's license numbers, Passport numbers, Dates of birth, Phone numbers, Email addresses, Addresses and Other details |
| Status | Confirmed by the company or a regulator filing |
What happened
IDScan.net, a Louisiana company whose VeriScan platform is used by car rental firms, retailers, bars, cannabis dispensaries and banks to scan and check ID cards, said an unauthorized third party got into part of its cloud environment between April 4 and September 2, 2026. The breach surfaced on September 1, when KrebsOnSecurity reported that a dark-web service called Nexus was selling scans of more than 153 million U.S. and Canadian driver's licenses that appeared to come from IDScan; that 153 million figure is the sellers' claim, not a confirmed count. IDScan says the information involved could include full names, contact information, dates of birth, and driver's license, passport or other government ID numbers, varying by how each business used the platform. A Texas breach filing reported by eSecurity Planet lists 13 million people affected in total. The FBI and Canada's Privacy Commissioner are investigating, and IDScan is offering free credit monitoring and identity protection.
What should I do?
- If you get a notice, enroll in the free credit monitoring IDScan offers (call 1-833-516-2980 for details).
- Place a free credit freeze with Equifax, Experian and TransUnion; a license scan plus your name and date of birth is enough for many identity-fraud attempts.
- Watch for accounts or loans opened in your name and check your credit reports at AnnualCreditReport.com.
- If you find fraud using your license, report it at IdentityTheft.gov and ask your state DMV whether you can get a new license number.
More data breaches in the United States →
Check the other services you use →
Sources
- Notification of Data Security Incident · IDScan.net · official
- News release: Privacy Commissioner of Canada launches investigation into a data breach involving stolen identification details · Office of the Privacy Commissioner of Canada · regulator
- FBI Probes Service Selling 153M+ Drivers Licenses · KrebsOnSecurity · news
- IDScan Breach Filing: 13M People Affected After 153M-Record Dark Web Claim · eSecurity Planet · news