A dark web service called Nexus breached an identity verification company and obtained 153 million U.S. and Canadian driver's licenses and 3 million travel documents, potentially exposing high-ranking government officials. The breach, linked to IDScan, poses national security risks as adversaries like China and Russia can use such identity data to target intelligence officials and counter American operations.
IDScan.net, a cloud-based identity-verification platform, disclosed unauthorized access to customer data including full names and government-issued identification numbers around September 1, 2026. Investigative reporting linked the incident to a dark web marketplace called Nexus selling over 153 million U.S. and Canadian driver's license scans, though IDScan.net has not confirmed the connection. The company is offering free credit monitoring and identity protection services to affected individuals.